HIGH
unzip: free() called for uninitialized or already freed pointer
Published Mar 17, 2008
9.3
HIGHCVSS 2.0
EPSS 6.29%
Description
The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.
Affected products
-
- Version 0StatusaffectedConstraints<6.0
- Version
Configuration 1
OR
- 6.06
- 6.10
- 7.04
- 7.10
Configuration 3
- 4.0
Configuration 4
- < 6.0
No data.
Red Hat Enterprise Linux 2.1
unzip-0:5.50-31.EL2.1
Fixed · RHSA-2008:0196
Red Hat Enterprise Linux 3
unzip-0:5.50-36.EL3
Fixed · RHSA-2008:0196
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 2.1 | unzip-0:5.50-31.EL2.1 | Fixed | RHSA-2008:0196 |
| Red Hat Enterprise Linux 3 | unzip-0:5.50-36.EL3 | Fixed | RHSA-2008:0196 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
9.3 HIGH NVD
AV:N/AC:M/Au:N/C:C/I:C/A:C
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
6.29% 0.06290
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.06290
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (24 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 6.29% (0.06290) | 93.38th | v5 (v2026.06.15) |
| Jun 15, 2026 | 6.29% (0.06290) | 92.67th | v5 (v2026.06.15) |
| Jun 7, 2026 | 16.32% (0.16321) | 94.98th | v4 (v2025.03.14) |
| Nov 16, 2025 | 19.04% (0.19040) | 95.07th | v4 (v2025.03.14) |
| Oct 7, 2025 | 21.94% (0.21943) | 95.57th | v4 (v2025.03.14) |
| Sep 25, 2025 | 16.90% (0.16899) | 94.74th | v4 (v2025.03.14) |
| Aug 11, 2025 | 21.44% (0.21439) | 95.45th | v4 (v2025.03.14) |
| May 15, 2025 | 4.11% (0.04114) | 88.00th | v4 (v2025.03.14) |
| Apr 26, 2025 | 2.97% (0.02966) | 85.73th | v4 (v2025.03.14) |
| Mar 30, 2025 | 4.79% (0.04786) | 88.46th | v4 (v2025.03.14) |
| Mar 29, 2025 | 6.62% (0.06620) | 84.90th | v4 (v2025.03.14) |
| Mar 19, 2025 | 4.79% (0.04786) | 88.15th | v4 (v2025.03.14) |
| Mar 17, 2025 | 5.95% (0.05951) | 89.95th | v4 (v2025.03.14) |
| Feb 26, 2025 | 10.50% (0.10499) | 95.11th | v3 (v2023.03.01) |
| Jan 19, 2025 | 8.43% (0.08427) | 94.45th | v3 (v2023.03.01) |
| Dec 17, 2024 | 9.48% (0.09484) | 94.73th | v3 (v2023.03.01) |
| Dec 12, 2024 | 12.39% (0.12387) | 95.66th | v3 (v2023.03.01) |
| Aug 19, 2024 | 13.49% (0.13490) | 95.69th | v3 (v2023.03.01) |
| Jul 12, 2024 | 7.07% (0.07075) | 94.04th | v3 (v2023.03.01) |
| Mar 23, 2024 | 7.19% (0.07192) | 93.87th | v3 (v2023.03.01) |
| Mar 7, 2023 | 6.69% (0.06689) | 92.69th | v3 (v2023.03.01) |
| Mar 6, 2023 | 6.60% (0.06604) | 91.53th | v2 (v2022.01.01) |
| Apr 1, 2022 | 6.60% (0.06604) | 90.72th | v2 (v2022.01.01) |
| Feb 4, 2022 | 6.60% (0.06604) | 78.62th | v2 (v2022.01.01) |
Weaknesses (1)
References (35)
- http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html vendor-advisoryx_refsource_APPLEThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html vendor-advisoryx_refsource_SUSEThird Party Advisory
- http://secunia.com/advisories/29392 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/29406 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/29415 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/29427 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/29432 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/29440 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/29495 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/29681 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/30535 third-party-advisoryx_refsource_SECUNIABroken LinkPatchVendor Advisory
- http://secunia.com/advisories/31204 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://security.gentoo.org/glsa/glsa-200804-06.xml vendor-advisoryx_refsource_GENTOOThird Party Advisory
- http://support.apple.com/kb/HT4077 x_refsource_CONFIRMThird Party Advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0116 x_refsource_CONFIRMBroken Link
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0116 x_refsource_CONFIRMBroken Link
- http://www.debian.org/security/2008/dsa-1522 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.ipcop.org/index.php?name=News&file=article&sid=40 x_refsource_CONFIRMBroken Link
- http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:068 vendor-advisoryx_refsource_MANDRIVANot Applicable
- http://www.redhat.com/support/errata/RHSA-2008-0196.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.securityfocus.com/archive/1/489967/100/0/threaded mailing-listx_refsource_BUGTRAQBroken Link
- http://www.securityfocus.com/archive/1/493080/100/0/threaded mailing-listx_refsource_BUGTRAQBroken Link
- http://www.securityfocus.com/bid/28288 vdb-entryx_refsource_BIDBroken Link
- http://www.securitytracker.com/id?1019634 vdb-entryx_refsource_SECTRACKBroken Link
- http://www.ubuntu.com/usn/usn-589-1 vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0009.html x_refsource_CONFIRMThird Party Advisory
- http://www.vupen.com/english/advisories/2008/0913/references vdb-entryx_refsource_VUPENBroken LinkVendor Advisory
- http://www.vupen.com/english/advisories/2008/1744 vdb-entryx_refsource_VUPENBroken LinkVendor Advisory
- https://access.redhat.com/security/cve/CVE-2008-0888 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=431438 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41246 vdb-entryx_refsource_XFThird Party Advisory
- https://issues.rpath.com/browse/RPL-2317 x_refsource_CONFIRMBroken Link
- https://nvd.nist.gov/vuln/detail/CVE-2008-0888
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9733 vdb-entrysignaturex_refsource_OVALBroken Link
- https://www.cve.org/CVERecord?id=CVE-2008-0888
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Mar 17, 2008
Updated Aug 26, 2025
Reserved Feb 21, 2008
Link CVE-2008-0888
CISA Vulnrichment
Updated n/a