CVE-2017-5946
published 2017-02-27CVE-2017-5946: The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker…
PriorityP352critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
3.47%
87.8th percentile
The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | ruby-zip | < ruby-zip 1.2.0-1.1 (bookworm) | ruby-zip 1.2.0-1.1 (bookworm) |
| rubyzip_project | rubyzip | < 1.2.1 | 1.2.1 |
| rubyzip_project | rubyzip | >= 0 < 1.2.2 | 1.2.2 |
| rubyzip_project | rubyzip | >= 0 < 1.2.1 | 1.2.1 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
ghsa9.8CRITICAL
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
rubygem-rubyzip: Directory traversal in the Zip::File component
vendor_redhat·2017-02-04·CVSS 9.8
CVE-2017-5946 [CRITICAL] CWE-22 rubygem-rubyzip: Directory traversal in the Zip::File component
rubygem-rubyzip: Directory traversal in the Zip::File component
The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.
Statement: This issue affects the versions of rubygem-rubyzip as shipped with Red Hat Quick Cloud Installer. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
Package: tfm-rubygem-rubyzip (Red Hat Quickstart Cloud Installer 1) - Under investigation
Debian
CVE-2017-5946: ruby-zip - The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory...
vendor_debian·2017·CVSS 9.8
CVE-2017-5946 [CRITICAL] CVE-2017-5946: ruby-zip - The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory...
The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.
Scope: local
bookworm: resolved (fixed in 1.2.0-1.1)
bullseye: resolved (fixed in 1.2.0-1.1)
forky: resolved (fixed in 1.2.0-1.1)
sid: resolved (fixed in 1.2.0-1.1)
trixie: resolved (fixed in 1.2.0-1.1)
OSV
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
osv·2018-09-06·CVSS 9.8
CVE-2018-1000544 [CRITICAL] Rubyzip gem contains a Directory Traversal vulnerability in zip file component
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem..
This is similar to CVE-2017-5946 which was patched in 1.2.1 but the fix in that case was incomplete.
GHSA
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
ghsa·2018-09-06·CVSS 9.8
CVE-2018-1000544 [CRITICAL] CWE-434 Rubyzip gem contains a Directory Traversal vulnerability in zip file component
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem..
This is similar to CVE-2017-5946 which was patched in 1.2.1 but the fix in that case was incomplete.
OSV
Directory traversal vulnerability in RubyZip
osv·2017-10-24
CVE-2017-5946 [CRITICAL] Directory traversal vulnerability in RubyZip
Directory traversal vulnerability in RubyZip
The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses `../` pathname substrings to write arbitrary files to the filesystem.
GHSA
Directory traversal vulnerability in RubyZip
ghsa·2017-10-24
CVE-2017-5946 [CRITICAL] CWE-22 Directory traversal vulnerability in RubyZip
Directory traversal vulnerability in RubyZip
The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses `../` pathname substrings to write arbitrary files to the filesystem.
OSV
CVE-2017-5946: The Zip::File component in the rubyzip gem before 1
osv·2017-02-27·CVSS 9.8
CVE-2017-5946 [CRITICAL] CVE-2017-5946: The Zip::File component in the rubyzip gem before 1
The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.
No detection rules found.
No public exploits indexed.
http://www.debian.org/security/2017/dsa-3801http://www.securityfocus.com/bid/96445https://github.com/rubyzip/rubyzip/issues/315https://github.com/rubyzip/rubyzip/releaseshttp://www.debian.org/security/2017/dsa-3801http://www.securityfocus.com/bid/96445https://github.com/rubyzip/rubyzip/issues/315https://github.com/rubyzip/rubyzip/releases
2017-02-27
Published