Path traversal in ZZIPlib - CVE-2018-17828

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU27504

Path traversal in ZZIPlib - CVE-2018-17828

Published: May 4, 2020


Vulnerability identifier: #VU27504
CSH Severity: Medium
CVSS v4: 7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-17828
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in ZZIPlib within the unzzip_cat() function in the bins/unzzipcat-mem.c. A remote attacker can pass specially crafted archive to the application and overwrite arbitrary files on the system.


Affected software

ZZIPlib
zziplib (Alpine package)
zziplib (Red Hat package)
zziplib
zziplib-devel
zziplib-utils
zziplib-doc
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Opensuse

How to mitigate CVE-2018-17828

Install update from vendor's website.

ZZIPlib - update to 0.13.70
zziplib (Alpine package) - addressed in versions 0.13.69-r2, 0.13.70-r0
zziplib (Red Hat package) - addressed in versions 0.13.62-12.el7, 0.13.68-8.el8, 0.13.71-12.el9
zziplib - addressed in versions 0.13.71-12.0.1, 0.13.78-2
zziplib-devel - addressed in versions 0.13.71-12.0.1, 0.13.78-2
zziplib-utils - addressed in versions 0.13.71-12.0.1, 0.13.78-2
zziplib-doc - update to 0.13.78-2

External References

Related Security Bulletins