Lucene search
Veracode Vulnerability DatabaseVERACODE:6821HistoryJun 19, 2018 - 7:25 a.m.
Directory Traversal
2018-06-1907:25:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.004 Low
EPSS
Percentile
74.5%
rubyzip is vulnerable to directory traversal attacks. A malicious user can pass zip file containing files with the / character or a zip file with a symlink to cause a directory traversal. This is related to CVE-2017-5946.
References
access.redhat.com/errata/RHSA-2018:3466
github.com/rubyzip/rubyzip/compare/e89f6aca440b36f90a961a8c5274c12fcacd9a19...8e78311d670ba70476fb46062c988849a82d1e02
github.com/rubyzip/rubyzip/issues/369
github.com/rubyzip/rubyzip/pull/371
lists.debian.org/debian-lts-announce/2018/08/msg00013.html
lists.debian.org/debian-lts-announce/2020/08/msg00002.html
www.sourceclear.com/vulnerability-database/security/directory-traversal/ruby/sid-3572/
Related
osv
osv
ruby-zip - security update
2018-08-15 00:00:00
ruby-zip - security update
2020-08-02 00:00:00
veracode
veracode
Directory Traversal
2019-01-15 09:26:53
Directory Traversal
2017-02-13 02:05:43
github
github
Directory traversal vulnerability in RubyZip
2017-10-24 18:33:35
nessus
nessus
Debian DLA-2307-1 : ruby-zip security update
2020-08-03 00:00:00
RHEL 7 : tfm-rubygem-rubyzip (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : CloudForms 4.6.5 (RHSA-2018:3466)
2024-04-27 00:00:00
debian
debian
[SECURITY] [DLA 2307-1] ruby-zip security update
2020-08-01 19:38:18
[SECURITY] [DLA 1467-1] ruby-zip security update
2018-08-15 11:30:21
[SECURITY] [DSA 3801-1] ruby-zip security update
2017-03-04 13:59:24
prion
prion
Directory traversal
2018-06-26 16:29:00
Directory traversal
2017-02-27 07:59:00
debiancve
debiancve
CVE-2018-1000544
2018-06-26 16:29:02
CVE-2017-5946
2017-02-27 07:59:00
ubuntucve
ubuntucve
CVE-2018-1000544
2018-06-26 00:00:00
CVE-2017-5946
2017-02-27 00:00:00
redhat
redhat
mageia
mageia
Updated ruby-rubyzip packages fix security vulnerability
2017-08-13 16:17:41
openvas
openvas
Debian: Security Advisory (DLA-846-1)
2018-01-11 00:00:00
Mageia: Security Advisory (MGASA-2017-0264)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-1467-1)
2018-08-14 00:00:00
cve
cve
CVE-2018-1000544
2018-06-26 16:29:02
CVE-2017-5946
2017-02-27 07:59:00
redhatcve
redhatcve
CVE-2018-1000544
2018-06-27 09:18:55
CVE-2017-5946
2017-03-01 15:19:25
cvelist
cvelist
CVE-2018-1000544
2018-06-26 16:00:00
CVE-2017-5946
2017-02-27 07:25:00
nvd
nvd
CVE-2018-1000544
2018-06-26 16:29:02
CVE-2017-5946
2017-02-27 07:59:00