Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
Denial Of Service
Debian
Debian Linux
Unzip
Unzip Project
NVD
GitHub
CVSS 3.1
3.3
EPSS
0.5%