Read the docs
TI-2018-12673 Aliases CVE-2018-17828GHSA-g8rp-fvg9-52vv

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite…

Priority LOW 28CWE-22Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.

Summary

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01538 75th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 4 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:gdraheim:zziplib:0.13.69:*:*:*:*:*:*:*0.13.69Vulnerablegdraheim
  • cpe:2.3:a:gdraheim:zziplib:0.13.69:*:*:*:*:*:*:* Versions 0.13.69 Vulnerable ·gdraheim

Remediation

Red Hat 4 advisories

  • RHSA-2025:20478 Released 2025-11-11 · Red Hat rating Moderate
    zziplib security update
    • Red Hat Enterprise Linux AppStream (v. 10) zziplib-0.13.78-2.el10, zziplib-utils-0.13.78-2.el10
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) zziplib-devel-0.13.78-2.el10
  • RHSA-2025:20838 Released 2025-11-11 · Red Hat rating Moderate
    zziplib security update
    • Red Hat Enterprise Linux AppStream (v. 9) zziplib-0.13.71-12.el9, zziplib-utils-0.13.71-12.el9
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) zziplib-devel-0.13.71-12.el9
  • RHSA-2020:1653 Released 2020-04-28 · Red Hat rating Moderate
    zziplib security update
    • Red Hat CodeReady Linux Builder (v. 8) zziplib-devel-0.13.68-8.el8
    • Red Hat Enterprise Linux AppStream (v. 8) zziplib-0.13.68-8.el8, zziplib-utils-0.13.68-8.el8
Show 1 more Red Hat advisories
  • RHSA-2020:1178 Released 2020-03-31 · Red Hat rating Moderate
    zziplib security update
    • Red Hat Enterprise Linux Client (v. 7) zziplib-0.13.62-12.el7
    • Red Hat Enterprise Linux Client Optional (v. 7) zziplib-devel-0.13.62-12.el7, zziplib-utils-0.13.62-12.el7
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) zziplib-0.13.62-12.el7, zziplib-devel-0.13.62-12.el7, zziplib-utils-0.13.62-12.el7
    • Red Hat Enterprise Linux Server (v. 7) zziplib-0.13.62-12.el7, zziplib-0.13.62-12.el7.ppc
    • Red Hat Enterprise Linux Server Optional (v. 7) zziplib-devel-0.13.62-12.el7, zziplib-devel-0.13.62-12.el7.ppc, zziplib-utils-0.13.62-12.el7
    • Red Hat Enterprise Linux Workstation (v. 7) zziplib-0.13.62-12.el7
    • Red Hat Enterprise Linux Workstation Optional (v. 7) zziplib-devel-0.13.62-12.el7, zziplib-utils-0.13.62-12.el7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2020:1653
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:20478
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2020:1653
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:20838
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2020:1178
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2020:1178
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2025:20478
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2025:20838
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2020:1178
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2020:1178
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2020:1178
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2020:1178
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2020:1178

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-17828
  2. 2026-10-03 Alias added: GHSA-g8rp-fvg9-52vv
  3. 2026-10-16 CISA SSVC decision points changed

References

Exploit 1

  • TI-2024-26186 A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a… CVSS 3.1HIGH 7.5
  • TI-2020-13469 An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in… CVSS 3.1MEDIUM 5.5
  • TI-2018-05016 In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the… CVSS 3.0MEDIUM 6.5
  • TI-2018-11868 An issue was discovered in ZZIPlib through 0.13.69. CVSS 3.0MEDIUM 6.5
  • TI-2018-04818 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when… CVSS 3.0MEDIUM 6.5
  • TI-2018-04817 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the… CVSS 3.0MEDIUM 6.5
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences