Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-0888

30
FAUCET Score

CVE-2008-0888 is a critical vulnerability affecting the unzip utility, specifically within the inflate_dynamic function's NEEDBITS macro, impacting products from Apple, Canonical, Debian, and the unzip_project. This flaw allows remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code by manipulating invalid buffers, leading to a free of uninitialized or previously-freed data. With a CVSS score of 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C), it presents a high-severity risk due to its network-based attack vector, medium complexity, and complete impact on confidentiality, integrity, and availability. Despite its age and high severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
6.06CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
6.10CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
7.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
7.10CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
< 10.6.3CPE matchmatch criteria
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

9.3HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
6.29%
Probability of exploitation in next 30 days
EPSS Percentile
92.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0629 is in the 67th percentile among its peer group of 8,914 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (34)

microsoftpatch availablevia msrc
Product: unzip-6.0-20.azl3.aarch64.rpm on Azure Linux 3.0 ARMFixed in: 6.0-20
microsoftpatch availablevia msrc
Product: cbl2 unzip 6.0-19 on CBL Mariner 2.0Fixed in: 6.0-19
microsoftpatch availablevia msrc
Product: azl3 unzip 6.0-20 on Azure Linux 3.0Fixed in: 6.0-20
microsoftpatch availablevia msrc
Product: azl3 unzip 6.0-22 on Azure Linux 3.0Fixed in: 6.0-20
microsoftpatch availablevia msrc
Product: 16921-16820Fixed in: 6.0-16
microsoftpatch availablevia msrc
Product: 16845-16823Fixed in: 6.0-19
microsoftpatch availablevia msrc
Product: 16846-17084Fixed in: 6.0-20
microsoftpatch availablevia msrc
Product: 18861-17084Fixed in: 6.0-20
microsoftpatch availablevia msrc
Product: unzip-6.0-20.azl3.x86_64.rpm on Azure Linux 3.0 x64Fixed in: 6.0-20
microsoftpatch availablevia msrc
Product: cm1 unzip 6.0-16 on CBL Mariner 1.0Fixed in: 6.0-16
microsoftpatch availablevia msrc
Product: 12847-12137Fixed in: 6.0-16
microsoftpatch availablevia msrc
Product: 12848-12137Fixed in: 6.0-16
microsoftpatch availablevia msrc
Product: 12849-12138Fixed in: 6.0-16
microsoftpatch availablevia msrc
Product: 12850-12138Fixed in: 6.0-16
microsoftpatch availablevia msrc
Product: 12841-12139Fixed in: 6.0-19
microsoftpatch availablevia msrc
Product: 12842-12139Fixed in: 6.0-19
microsoftpatch availablevia msrc
Product: 12843-12140Fixed in: 6.0-19
microsoftpatch availablevia msrc
Product: 12844-12140Fixed in: 6.0-19
microsoftpatch availablevia msrc
Product: 12845-12356Fixed in: 6.0-20
microsoftpatch availablevia msrc
Product: 12846-12357Fixed in: 6.0-20
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 x64Fixed in: 6.0-16
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 ARMFixed in: 6.0-16
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 6.0-19
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 6.0-19
microsoftpatch availablevia msrc
Product: unzip-6.0-16.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 6.0-16
microsoftpatch availablevia msrc
Product: unzip-debuginfo-6.0-16.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 6.0-16
microsoftpatch availablevia msrc
Product: unzip-6.0-16.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 6.0-16
microsoftpatch availablevia msrc
Product: unzip-debuginfo-6.0-16.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 6.0-16
microsoftpatch availablevia msrc
Product: unzip-6.0-19.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 6.0-19
microsoftpatch availablevia msrc
Product: unzip-debuginfo-6.0-19.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 6.0-19
microsoftpatch availablevia msrc
Product: unzip-6.0-19.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 6.0-19
microsoftpatch availablevia msrc
Product: unzip-debuginfo-6.0-19.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 6.0-19
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 2.1Fixed in: unzip-0:5.50-31.EL2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: unzip-0:5.50-36.EL3
View patch

Vendor Advisories (4)

microsoft2024-Jun/CVE-2008-0888

CVE-2008-0888

Jun 11, 2024
microsoft2021-Dec/CVE-2008-0888

CVE-2008-0888

Dec 14, 2021
redhatCVE-2008-0888Moderate

unzip: free() called for uninitialized or already freed pointer

Mar 17, 2008
microsoft2008-Mar/CVE-2008-0888Critical

The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.

Mar 2, 2008

References

lists.apple.com / archives/security-announce/2010//Mar/msg00001.html
Third Party Advisory
lists.opensuse.org / opensuse-security-announce/2008-03/msg00008.html
Third Party Advisory
secunia.com / advisories/29392
Broken LinkVendor Advisory
secunia.com / advisories/29406
Broken LinkVendor Advisory
secunia.com / advisories/29415
Broken LinkVendor Advisory
secunia.com / advisories/29427
Broken LinkVendor Advisory
secunia.com / advisories/29432
Broken LinkVendor Advisory
secunia.com / advisories/29440
Broken LinkVendor Advisory
secunia.com / advisories/29495
Broken LinkVendor Advisory
secunia.com / advisories/29681
Broken LinkVendor Advisory
secunia.com / advisories/30535
Broken LinkPatchVendor Advisory
secunia.com / advisories/31204
Broken LinkVendor Advisory
security.gentoo.org / glsa/glsa-200804-06.xml
Third Party Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/41246
Third Party Advisory
issues.rpath.com / browse/RPL-2317
Broken Link
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9733
Broken Link
support.apple.com / kb/HT4077
Third Party Advisory
wiki.rpath.com / Advisories:rPSA-2008-0116
Broken Link
wiki.rpath.com / wiki/Advisories:rPSA-2008-0116
Broken Link
debian.org / security/2008/dsa-1522
Third Party Advisory
ipcop.org / index.php
Broken Link
mandriva.com / en/security/advisories
Not Applicable
redhat.com / support/errata/RHSA-2008-0196.html
Third Party Advisory
securityfocus.com / archive/1/489967/100/0/threaded
Broken Link
securityfocus.com / archive/1/493080/100/0/threaded
Broken Link
securityfocus.com / bid/28288
Broken Link
securitytracker.com / id
Broken Link
ubuntu.com / usn/usn-589-1
Third Party Advisory
vmware.com / security/advisories/VMSA-2008-0009.html
Third Party Advisory
vupen.com / english/advisories/2008/0913/references
Broken LinkVendor Advisory
vupen.com / english/advisories/2008/1744
Broken LinkVendor Advisory