CVE-2018-17828
Fixed in a distro release EPSS 2%
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.
Products: gdraheim zziplib
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | zziplib | 0.13.78-2.el10 |
| AlmaLinux 10 | zziplib-devel | 0.13.78-2.el10 |
| AlmaLinux 10 | zziplib-utils | 0.13.78-2.el10 |
| AlmaLinux 8 | zziplib-devel | 0.13.68-8.el8 |
| AlmaLinux 9 | zziplib | 0.13.71-12.el9 |
| AlmaLinux 9 | zziplib-devel | 0.13.71-12.el9 |
| AlmaLinux 9 | zziplib-utils | 0.13.71-12.el9 |
| Amazon Linux 2 | zziplib | 0.13.62-12.amzn2 |
| Amazon Linux 2 | zziplib-devel | 0.13.62-12.amzn2 |
| Amazon Linux 2 | zziplib-utils | 0.13.62-12.amzn2 |
| Debian 12 | zziplib | no fix |
| Debian 13 | zziplib | no fix |
| Debian 14 | zziplib | no fix |
| Red Hat Enterprise Linux 10.1 | zziplib | 0:0.13.78-2.el10 |
| Red Hat Enterprise Linux 10.1 | zziplib-debuginfo | 0:0.13.78-2.el10 |
| Red Hat Enterprise Linux 10.1 | zziplib-debugsource | 0:0.13.78-2.el10 |
| Red Hat Enterprise Linux 10.1 | zziplib-devel | 0:0.13.78-2.el10 |
| Red Hat Enterprise Linux 10.1 | zziplib-utils | 0:0.13.78-2.el10 |
| Red Hat Enterprise Linux 10.1 | zziplib-utils-debuginfo | 0:0.13.78-2.el10 |
| Red Hat Enterprise Linux 7 | zziplib | 0:0.13.62-12.el7 |
| Red Hat Enterprise Linux 7 | zziplib-debuginfo | 0:0.13.62-12.el7 |
| Red Hat Enterprise Linux 7 | zziplib-devel | 0:0.13.62-12.el7 |
| Red Hat Enterprise Linux 7 | zziplib-utils | 0:0.13.62-12.el7 |
| Red Hat Enterprise Linux 8 | zziplib | 0:0.13.68-8.el8 |
| Red Hat Enterprise Linux 8 | zziplib-debuginfo | 0:0.13.68-8.el8 |
| Red Hat Enterprise Linux 8 | zziplib-debugsource | 0:0.13.68-8.el8 |
| Red Hat Enterprise Linux 8 | zziplib-devel | 0:0.13.68-8.el8 |
| Red Hat Enterprise Linux 8 | zziplib-utils | 0:0.13.68-8.el8 |
| Red Hat Enterprise Linux 8 | zziplib-utils-debuginfo | 0:0.13.68-8.el8 |
| Red Hat Enterprise Linux 9 | zziplib | 0:0.13.71-12.el9 |
| Red Hat Enterprise Linux 9 | zziplib-debuginfo | 0:0.13.71-12.el9 |
| Red Hat Enterprise Linux 9 | zziplib-debugsource | 0:0.13.71-12.el9 |
| Red Hat Enterprise Linux 9 | zziplib-devel | 0:0.13.71-12.el9 |
| Red Hat Enterprise Linux 9 | zziplib-utils | 0:0.13.71-12.el9 |
| Red Hat Enterprise Linux 9 | zziplib-utils-debuginfo | 0:0.13.71-12.el9 |
| Rocky Linux 10 | zziplib | 0:0.13.78-2.el10 |
| Rocky Linux 8 | zziplib | 0:0.13.68-8.el8 |
| Rocky Linux 9 | zziplib | 0:0.13.71-12.el9 |
| SUSE Linux Enterprise Desktop 12 SP3 | zziplib | 0.13.67-10.14.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | zziplib | 0.13.69-3.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | zziplib | 0.13.67-10.14.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | zziplib | 0.13.67-10.14.1 |
| Ubuntu 20.04 LTS | zziplib | no fix |
| Ubuntu 22.04 LTS | zziplib | no fix |
| Ubuntu 24.04 LTS | zziplib | no fix |
| Ubuntu 25.10 | zziplib | no fix |
| Ubuntu 26.04 LTS | zziplib | no fix |
| Ubuntu 26.10 | zziplib | no fix |
| Ubuntu Pro 16.04 LTS | zziplib | no fix |
| Ubuntu Pro 18.04 LTS | zziplib | no fix |
| openSUSE Tumbleweed | zziplib | 0.13.72-1.4 |