CVE-2022-0530: unzip project unzip +5 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2022-0530

CVSS 5.5 · Medium EPSS 2,1%

Kerentanan pada unzip project unzip, redhat enterprise linux +4 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

Rincian

Terbit di NVD: 9 Februari 2022
Terakhir diubah: 8 Oktober 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
EPSS (30 hari): 2,1% peluang dieksploitasi; lebih tinggi dari 81,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
unzip project	unzip	Versi 6.0
redhat	enterprise linux	Versi 8.0
fedoraproject	fedora	Versi 35
apple	mac os x	Versi 10.15 hingga sebelum 10.15.7
apple	mac os x	Versi 10.15.7
apple	mac os x	Versi 10.15.7 security_update_2020
apple	mac os x	Versi 10.15.7 security_update_2020-001
apple	mac os x	Versi 10.15.7 security_update_2020-005
apple	mac os x	Versi 10.15.7 security_update_2020-007
apple	mac os x	Versi 10.15.7 security_update_2021-001
apple	mac os x	Versi 10.15.7 security_update_2021-002
apple	mac os x	Versi 10.15.7 security_update_2021-003
apple	mac os x	Versi 10.15.7 security_update_2021-006
apple	mac os x	Versi 10.15.7 security_update_2021-007
apple	mac os x	Versi 10.15.7 security_update_2021-008
apple	mac os x	Versi 10.15.7 security_update_2022-001
apple	mac os x	Versi 10.15.7 security_update_2022-002
apple	mac os x	Versi 10.15.7 security_update_2022-003
apple	mac os x	Versi 10.15.7 supplemental_update
apple	macos	Versi 11.0 hingga sebelum 11.6.6
apple	macos	Versi 12.0.0 hingga sebelum 12.4
debian	debian linux	Versi 10.0
debian	debian linux	Versi 11.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://support.apple.com/kb/HT213255 advisory vendor
https://support.apple.com/kb/HT213256 advisory vendor
https://support.apple.com/kb/HT213257 advisory vendor
http://seclists.org/fulldisclosure/2022/May/33 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2022/May/35 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2022/May/38 mailing list · advisory pihak ketiga
https://bugzilla.redhat.com/show_bug.cgi?id=2051395 issue tracking · advisory pihak ketiga
https://github.com/ByteHackr/unzip_poc exploit · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2022/09/msg00028.html mailing list · advisory pihak ketiga
https://security.gentoo.org/glsa/202310-17 advisory pihak ketiga
https://www.debian.org/security/2022/dsa-5202 advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 9 Okt 2026, 12:28 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.