Lucene search
Veracode Vulnerability DatabaseVERACODE:7556HistoryOct 02, 2018 - 7:40 a.m.
Arbitrary File Write
2018-10-0207:40:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
23.6%
zziplib is vulnerable to arbitrary file writes. The library does not properly sanitize file paths, allowing a malicious user to overwrite arbitrary files on the system by passing a zip file with .. in it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zziplib | eq | 0.13.62 | |
| zziplib | eq | 0.13.62__9.el7 | |
| zziplib | eq | 0.13.62__11.el7 | |
| zziplib | eq | 0.13.68__7.el8 |
References
Related
oraclelinux
oraclelinux
zziplib security update
2020-05-05 00:00:00
zziplib security update
2020-04-06 00:00:00
nessus
nessus
Amazon Linux 2 : zziplib (ALAS-2020-1551)
2020-10-27 00:00:00
RHEL 8 : zziplib (RHSA-2020:1653)
2020-04-28 00:00:00
Scientific Linux Security Update : zziplib on SL7.x x86_64 (20200407)
2020-04-21 00:00:00
centos
centos
zziplib security update
2020-04-08 20:12:32
redhat
redhat
(RHSA-2020:1178) Moderate: zziplib security update
2020-03-31 09:28:43
(RHSA-2020:1653) Moderate: zziplib security update
2020-04-28 09:01:25
almalinux
almalinux
Moderate: zziplib security update
2020-04-28 09:01:25
cbl_mariner
cbl_mariner
CVE-2018-17828 affecting package zziplib for versions less than 0.13.69-8
2023-01-27 21:29:56
CVE-2018-17828 affecting package zziplib for versions less than 0.13.69-8
2023-01-27 21:29:56
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:3220-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for zziplib (openSUSE-SU-2018:3446-1)
2018-10-26 00:00:00
openSUSE: Security Advisory for zziplib (openSUSE-SU-2018:3314-1)
2018-10-26 00:00:00
rocky
rocky
zziplib security update
2020-04-28 09:01:25
osv
osv
CVE-2018-17828
2018-10-01 08:29:01
Moderate: zziplib security update
2020-04-28 09:01:25
Moderate: zziplib security update
2020-04-28 09:01:25
suse
suse
Security update for zziplib (moderate)
2018-10-25 18:18:12
Security update for zziplib (moderate)
2018-10-23 15:15:12
ubuntucve
ubuntucve
CVE-2018-17828
2018-10-01 00:00:00
redhatcve
redhatcve
CVE-2018-17828
2018-10-03 20:49:48
amazon
amazon
Medium: zziplib
2020-10-22 18:44:00
prion
prion
Directory traversal
2018-10-01 08:29:00
cvelist
cvelist
CVE-2018-17828
2018-10-01 08:00:00
nvd
nvd
CVE-2018-17828
2018-10-01 08:29:01
alpinelinux
alpinelinux
CVE-2018-17828
2018-10-01 08:29:01
cve
cve
CVE-2018-17828
2018-10-01 08:29:01
debiancve
debiancve
CVE-2018-17828
2018-10-01 08:29:01
mageia
mageia
Updated zziplib packages fix security vulnerability
2019-02-21 01:18:01