Bug 1080079 (CVE-2018-1000034) - VUL-0: CVE-2018-1000034: unzip: [Multiple vulnerabilities in the LZMA compression algorithm]
Summary: VUL-0: CVE-2018-1000034: unzip: [Multiple vulnerabilities in the LZMA compres...
Status: RESOLVED INVALID
Alias: CVE-2018-1000034
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P5 - None : Normal
Target Milestone: ---
Assignee: Kristyna Streitova
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/199645/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-02-08 13:57 UTC by Karol Babioch
Modified: 2018-02-08 13:57 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Karol Babioch 2018-02-08 13:57:09 UTC 
CVE-2018-1000034

This vulnerability only affects UnZip 6.1c22 (next beta version of UnZip). InfoZip’s UnZip suffers from multiple vulnerabilities in the LZMA implementation. Various crash dumps have been supplied to the vendor but no further analysis has been performed.

References:
https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000034
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-1000034.html
Comment 1 Karol Babioch 2018-02-08 13:57:33 UTC 
We are not affected by this, since our codestreams are not based on 6.1c22