Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7556
HistoryOct 02, 2018 - 7:40 a.m.

Arbitrary File Write

2018-10-0207:40:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

EPSS

0.001

Percentile

24.7%

JSON

zziplib is vulnerable to arbitrary file writes. The library does not properly sanitize file paths, allowing a malicious user to overwrite arbitrary files on the system by passing a zip file with .. in it.

Related

oraclelinux 2
centos 1
nessus 19
redhat 2
openvas 5
almalinux 1
cbl_mariner 2
alpinelinux 1
debiancve 1
osv 4
cve 1
suse 2
nvd 1
prion 1
cvelist 1
redhatcve 1
ubuntucve 1
amazon 1
rocky 1
mageia 1
oraclelinux
oraclelinux
zziplib security update
2020-05-05 00:00:00
zziplib security update
2020-04-06 00:00:00
centos
centos
zziplib security update
2020-04-08 20:12:32
nessus
nessus
Amazon Linux 2 : zziplib (ALAS-2020-1551)
2020-10-27 00:00:00
Scientific Linux Security Update : zziplib on SL7.x x86_64 (20200407)
2020-04-21 00:00:00
RHEL 8 : zziplib (RHSA-2020:1653)
2020-04-28 00:00:00
redhat
redhat
(RHSA-2020:1178) Moderate: zziplib security update
2020-03-31 09:28:43
(RHSA-2020:1653) Moderate: zziplib security update
2020-04-28 09:01:25
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:3220-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for zziplib (openSUSE-SU-2018:3446-1)
2018-10-26 00:00:00
openSUSE: Security Advisory for zziplib (openSUSE-SU-2018:3314-1)
2018-10-26 00:00:00
almalinux
almalinux
Moderate: zziplib security update
2020-04-28 09:01:25
cbl_mariner
cbl_mariner
CVE-2018-17828 affecting package zziplib for versions less than 0.13.69-8
2023-01-27 21:29:56
CVE-2018-17828 affecting package zziplib for versions less than 0.13.69-8
2023-01-27 21:29:56
alpinelinux
alpinelinux
CVE-2018-17828
2018-10-01 08:29:01
debiancve
debiancve
CVE-2018-17828
2018-10-01 08:29:01
osv
osv
Moderate: zziplib security update
2020-04-28 09:01:25
CVE-2018-17828
2018-10-01 08:29:01
Moderate: zziplib security update
2020-04-28 09:01:25
cve
cve
CVE-2018-17828
2018-10-01 08:29:01
suse
suse
Security update for zziplib (moderate)
2018-10-23 15:15:12
Security update for zziplib (moderate)
2018-10-25 18:18:12
nvd
nvd
CVE-2018-17828
2018-10-01 08:29:01
prion
prion
Directory traversal
2018-10-01 08:29:00
cvelist
cvelist
CVE-2018-17828
2018-10-01 08:00:00
redhatcve
redhatcve
CVE-2018-17828
2018-10-03 20:49:48
ubuntucve
ubuntucve
CVE-2018-17828
2018-10-01 00:00:00
amazon
amazon
Medium: zziplib
2020-10-22 18:44:00
rocky
rocky
zziplib security update
2020-04-28 09:01:25
mageia
mageia
Updated zziplib packages fix security vulnerability
2019-02-21 01:18:01

EPSS

0.001

Percentile

24.7%

JSON
Related for VERACODE:7556
oraclelinux2centos1nessus19redhat2openvas5almalinux1cbl_mariner2alpinelinux1debiancve1osv4cve1suse2nvd1prion1cvelist1redhatcve1ubuntucve1amazon1rocky1mageia1