[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256288

 
 

909

 
 

199146

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2018-17828 -- zziplib

ID: oval:org.secpod.oval:def:2001241Date: (C)2019-04-22   (M)2023-12-20
Class: VULNERABILITYFamily: unix




Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.

Platform:
Debian 8.x
Debian 9.x
Product:
libzzip-dev
Reference:
CVE-2018-17828
CVE    1
CVE-2018-17828
CPE    3
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x
cpe:/a:zziplib:libzzip-dev

© SecPod Technologies