PT-2025-11484 · Zip+1 · Zip+1

Published 2025-03-17 · Updated 2025-03-17 · CVE-2025-29787

Positive Technologies (AI Summary)

CVSS v4.0

7.3

High

Base vector

AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions zip versions 1.3.0 through 2.3.0 zip version 2.3.0 fixes the issue, so the affected versions are prior to 2.3.0 Therefore, the affected versions are: zip versions 1.3.0 through 2.2.x

Description The archive extraction routine of the zip crate allows symbolic links earlier in the archive to be used for later files in the archive without validation of the final canonicalized path. This enables maliciously crafted archives to overwrite arbitrary files in the file system when extracted. Users who extract untrusted archive files using high-level API methods may be affected, and critical files on the system may be overwritten with arbitrary file permissions, potentially leading to code execution.

Recommendations For zip versions 1.3.0 through 2.2.x, update to version 2.3.0 to fix the issue. As a temporary workaround, consider avoiding the extraction of untrusted archive files using the zip::unstable::stream::ZipStreamReader::extract and zip::read::ZipArchive::extract methods until the issue is resolved. Restrict access to the extract method to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

CWE-61

CWE-180

Related Identifiers

CVE-2025-29787

GHSA-94VH-GPHV-8PM8

Affected Products

Debian

Zip

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/29xxx/CVE-2025-29787.json · Exploit
• https://osv.dev/vulnerability/GHSA-94vh-gphv-8pm8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-29787 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-29787 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-29787 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-29787 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-29787 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-29787 · Security Note
• https://github.com/zip-rs/zip2/commit/a2e062f37066c3b12860a32eb1cb44856cfb7afe · Note
• https://github.com/zip-rs/zip2/releases/tag/v2.3.0 · Note
• https://github.com/zip-rs/zip2/security/advisories/GHSA-94vh-gphv-8pm8 · Note
• https://github.com/zip-rs/zip2 · Note
• https://t.me/cvedetector/20480 · Telegram Post
• https://t.me/cvetracker/19283 · Telegram Post
• https://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 · Note