CVE-2018-17828 Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file...
MediumCVSS 5.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/zziplib(Debian:12) | All versions | No fix listed |
| debian/zziplib(Debian:12) | = 0.13.72+dfsg.1-1.1 | No fix listed |
| debian/zziplib(Debian:12) | = 0.13.72+dfsg.1-1.2 | No fix listed |
| debian/zziplib(Debian:12) | = 0.13.72+dfsg.1-1.2~exp1 | No fix listed |
| debian/zziplib(Debian:12) | = 0.13.72+dfsg.1-1.3 | No fix listed |
| debian/zziplib(Debian:12) | = 0.13.78+dfsg.1-0.1 | No fix listed |
| debian/zziplib(Debian:12) | = 0.13.78+dfsg.1-0.2 | No fix listed |
| debian/zziplib(Debian:13) | All versions | No fix listed |
| debian/zziplib(Debian:13) | = 0.13.78+dfsg.1-0.1 | No fix listed |
| debian/zziplib(Debian:13) | = 0.13.78+dfsg.1-0.2 | No fix listed |
| debian/zziplib(Debian:14) | All versions | No fix listed |
| debian/zziplib(Debian:14) | = 0.13.78+dfsg.1-0.1 | No fix listed |
| debian/zziplib(Debian:14) | = 0.13.78+dfsg.1-0.2 | No fix listed |
| alpine/zziplib(Alpine:v3.10) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.11) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.12) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.13) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.14) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.15) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.16) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.17) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.18) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.19) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.20) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.21) | < 0.13.69-r2 | 0.13.69-r2 |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/zziplib(Alpine:v3.22) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.23) | < 0.13.69-r2 | 0.13.69-r2 |
| alpine/zziplib(Alpine:v3.24) | < 0.13.69-r2 | 0.13.69-r2 |
| ubuntu/zziplib(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/zziplib(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/zziplib(Ubuntu:26.10) | All versions | No fix listed |
| gdraheim zziplib | = 0.13.69 | No fix listed |
| ubuntu/zziplib(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-17828 vendor-advisory
- security.alpinelinux.org vendor-advisory
- github.com exploit patch third-party-advisory