Vulnerabilities > CVE-2021-4217 - NULL Pointer Dereference vulnerability in multiple products

047910
CVSS 3.3 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
LOW
local
low complexity
unzip-project
fedoraproject
redhat
CWE-476
NVD
Published: 2022-08-24
Updated: 2024-11-21

Summary

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

Vulnerable Configurations

Part Description Count
Application
Unzip_Project
1
OS
Fedoraproject
1
OS
Redhat
4

Common Weakness Enumeration (CWE)

References