CVE-2018-17828: Path Traversal
A flaw was found in ZZIPlib 0.13.69. A directory traversal vulnerability allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzipcat in the bins/unzzipcat-mem.c file.
References: https://github.com/gdraheim/zziplib/issues/62
Other sources
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzipcat in the bins/unzzipcat-mem.c file.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17828?
CVE-2018-17828 is classified as a medium severity vulnerability.
How do I fix CVE-2018-17828?
To remediate CVE-2018-17828, update ZZIPlib to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2018-17828?
CVE-2018-17828 is a directory traversal vulnerability.
Who is affected by CVE-2018-17828?
CVE-2018-17828 affects users of ZZIPlib version 0.13.69.
What could an attacker do with CVE-2018-17828?
An attacker could exploit CVE-2018-17828 to overwrite arbitrary files on the system by crafting a malicious zip file.