Fluid Attacks Database

Description

Rubyzip gem contains a Directory Traversal vulnerability in zip file component rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem..

This is similar to CVE-2017-5946 which was patched in 1.2.1 but the fix in that case was incomplete.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rubygems	rubyzip	>=0 <1.2.2	1.2.2
debian 13	ruby-zip	>=0 <1.2.2-1	1.2.2-1
debian 11	ruby-zip	>=0 <1.2.2-1	1.2.2-1
debian 12	ruby-zip	>=0 <1.2.2-1	1.2.2-1
debian 14	ruby-zip	>=0 <1.2.2-1	1.2.2-1

Aliases

1. CVE-2018-10005442. NVD-2018-10005443. OSV-2018-10005444. OSV-DEBIAN-2018-10005445. GCVE-2018-10005446. access.redhat.com7. lists.debian.org8. lists.debian.org9. SECURITY-TRACKER-CVE-2018-1000544

References

1. https://github.com/rubyzip/rubyzip/issues/3692. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubyzip/CVE-2018-1000544.yml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.