CVE-2018-17828
zziplib: The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: directory...
CVE-2018-17828 is fixed in 3 products on 1 platform, first by RHSA-2020:1653, released April 28, 2020. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0154
74th percentile
The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| zziplib · RHEL 8 | 0:0.13.68-8.el8 | RHSA-2020:1653 | Apr 28, 2020 |
| zziplib · RHEL 9 | 0:0.13.71-12.el9 | RHSA-2025:20838 | Nov 11, 2025 |
| zziplib · almalinux 10 | 0.13.78-2.el10 | ALSA-2025:20478 | Nov 11, 2025 |
| zziplib · almalinux 9 | 0.13.71-12.el9 | ALSA-2025:20838 | Nov 11, 2025 |
| zziplib · ol 10 | 0:0.13.78-2.el10 | ELSA-2025-20478-0 | Nov 25, 2025 |
| zziplib · ol 8 | 0:0.13.68-8.el8 | ELSA-2020-1653 | May 5, 2020 |
| zziplib · ol 9 | 0:0.13.71-12.el9 | ELSA-2025-20838 | Nov 17, 2025 |
| zziplib · rocky 10 | 0:0.13.78-2.el10 | RLSA-2025:20478 | Nov 21, 2025 |
| zziplib · rocky 9 | 0:0.13.71-12.el9 | RLSA-2025:20838 | Nov 21, 2025 |
| zziplib-devel · RHEL 8 | 0:0.13.68-8.el8 | RHSA-2020:1653 | Apr 28, 2020 |
| zziplib-devel · RHEL 9 | 0:0.13.71-12.el9 | RHSA-2025:20838 | Nov 11, 2025 |
| zziplib-devel · almalinux 10 | 0.13.78-2.el10 | ALSA-2025:20478 | Nov 11, 2025 |
| zziplib-devel · almalinux 9 | 0.13.71-12.el9 | ALSA-2025:20838 | Nov 11, 2025 |
| zziplib-devel · ol 10 | 0:0.13.78-2.el10 | ELSA-2025-20478-0 | Nov 25, 2025 |
| zziplib-devel · ol 9 | 0:0.13.71-12.el9 | ELSA-2025-20838 | Nov 17, 2025 |
| zziplib-utils · RHEL 8 | 0:0.13.68-8.el8 | RHSA-2020:1653 | Apr 28, 2020 |
| zziplib-utils · RHEL 9 | 0:0.13.71-12.el9 | RHSA-2025:20838 | Nov 11, 2025 |
| zziplib-utils · almalinux 10 | 0.13.78-2.el10 | ALSA-2025:20478 | Nov 11, 2025 |
| zziplib-utils · almalinux 9 | 0.13.71-12.el9 | ALSA-2025:20838 | Nov 11, 2025 |
| zziplib-utils · ol 10 | 0:0.13.78-2.el10 | ELSA-2025-20478-0 | Nov 25, 2025 |
| zziplib-utils · ol 8 | 0:0.13.68-8.el8 | ELSA-2020-1653 | May 5, 2020 |
| zziplib-utils · ol 9 | 0:0.13.71-12.el9 | ELSA-2025-20838 | Nov 17, 2025 |