Vulnerability CVE-2021-4217: Information

Description

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

Severity: LOW (3.3)

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

URL: https://nvd.nist.gov/vuln/detail/CVE-2021-4217

Published: Aug. 24, 2022

Modified: Nov. 21, 2024

Error type identifier: CWE-476

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
openslp	sisyphus	2.0.0-alt3	2.0.0-alt4	ALT-PU-2022-2950-2	309138	Fixed
openslp	sisyphus_e2k	2.0.0-alt3	2.0.0-alt4	ALT-PU-2022-6834-1	-	Fixed
openslp	sisyphus_riscv64	2.0.0-alt3	2.0.0-alt4	ALT-PU-2022-6816-1	-	Fixed
openslp	p11	2.0.0-alt3	2.0.0-alt4	ALT-PU-2022-2950-2	309138	Fixed
openslp	p10	2.0.0-alt3	2.0.0-alt3	ALT-PU-2022-2974-1	309147	Fixed
openslp	p10_e2k	2.0.0-alt3	2.0.0-alt3	ALT-PU-2022-6880-1	-	Fixed
openslp	c10f2	2.0.0-alt3	2.0.0-alt3	ALT-PU-2022-2974-1	309147	Fixed
openslp	c9f2	2.0.0-alt3	2.0.0-alt3	ALT-PU-2022-2972-1	309148	Fixed
unzip	sisyphus	6.0-alt5	6.0-alt7	ALT-PU-2022-2769-2	308257	Fixed
unzip	sisyphus_e2k	6.0-alt5	6.0-alt6	ALT-PU-2022-6505-1	-	Fixed
unzip	sisyphus_riscv64	6.0-alt5	6.0-alt7	ALT-PU-2022-6499-1	-	Fixed
unzip	p11	6.0-alt5	6.0-alt6	ALT-PU-2022-2769-2	308257	Fixed
unzip	p10	6.0-alt5	6.0-alt5	ALT-PU-2022-2845-1	308258	Fixed
unzip	p10_e2k	6.0-alt5	6.0-alt5	ALT-PU-2022-6583-1	-	Fixed
unzip	c10f2	6.0-alt5	6.0-alt6	ALT-PU-2022-2845-1	308258	Fixed
unzip	c9f2	6.0-alt5	6.0-alt6	ALT-PU-2022-2912-1	308259	Fixed

References to Advisories, Solutions, and Tools

Hyperlink	Resource
https://access.redhat.com/security/cve/CVE-2021-4217	Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1957077	Exploit Issue Tracking Patch Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2044583	Exploit Issue Tracking Third Party Advisory
BDU:2023-09078

Affected configurations:
1. cpe:2.3:a:unzip_project:unzip:6.0:*:*:*:*:*:*:*
  cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
  cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
  cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Version: v26.2.2