PT-2022-10096 · Unknown · Sharpziplib

Jarlob + 1 · Published 2022-01-26 · Updated 2022-02-07 · CVE-2021-32842

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions SharpZipLib versions 1.0.0 through 1.3.2

Description The issue affects SharpZipLib, a library for handling Zip, GZip, Tar, and BZip2 files. A check was added to ensure the destination file is under the destination directory, but it does not enforce that the baseDirectory ends with a slash. This allows for the creation of a file with a name that begins as the destination directory one level up, limited by file name and destination directory constraints. The impact depends on the use case.

Recommendations For versions 1.0.0 through 1.3.2, update to version 1.3.3 to resolve the issue. As a temporary workaround, consider ensuring that the baseDirectory always ends with a slash to prevent arbitrary file creation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-32842

GHSA-MM6G-MMQ6-53FF

Affected Products

Sharpziplib

References · 10

• 🔥 https://securitylab.github.com/advisories/GHSL-2021-125-sharpziplib · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-32842 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-32842 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-32842 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32842 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mm6g-mmq6-53ff · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32842 · Vendor Advisory
• https://github.com/icsharpcode/SharpZipLib/releases/tag/v1.3.3 · Note
• https://github.com/icsharpcode/SharpZipLib · Note
• https://t.me/cibsecurity/36359 · Telegram Post