PT-2018-14208
CVE-2018-17828
·
Published
2018-09-25
·
Updated
2026-10-31
Description by
CVSS 2.0
5.8
MediumMetricsAV:N/AC:M/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
ZZIPlib version 0.13.69
Description
The issue allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file. This is due to the
unzzip cat function in the bins/unzzipcat-mem.c file.Recommendations
For ZZIPlib version 0.13.69, consider restricting the use of the
unzzip cat function until a patch is available to prevent directory traversal attacks.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾