CVE-2018-17828
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk74th percentile - higher than 74% of all known CVEs
Summary
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.
Risk Assessment
An attacker could provide a malicious zip file that, when extracted, overwrites critical system or application files, leading to code execution or data destruction. This may result in full system compromise.
Recommendation
Update ZZIPlib to a version containing the fix or avoid extracting untrusted zip archives with vulnerable tools. Verify archive contents before extraction.
Other vulnerabilities in ZZIPlib
See all- CVE-2026-111142Medium
Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end.
- CVE-2026-111141Medium
zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c. An ineffective bounds check allows reading past the mapped central directory in mmap builds when a crafted ZIP entry name ends at the central directory end, triggering 28-byte ZIP64 extra field over-reads and crashing the process.
Original NVD description (English source)
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS