An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.
{ "binaries": [ { "binary_name": "liblzma-dev", "binary_version": "5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1" }, { "binary_name": "liblzma-doc", "binary_version": "5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1" }, { "binary_name": "liblzma5", "binary_version": "5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1" }, { "binary_name": "liblzma5-dbgsym", "binary_version": "5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1" }, { "binary_name": "xz-utils", "binary_version": "5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1" }, { "binary_name": "xz-utils-dbgsym", "binary_version": "5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1" }, { "binary_name": "xzdec", "binary_version": "5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1" }, { "binary_name": "xzdec-dbgsym", "binary_version": "5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "liblzma-dev", "binary_version": "5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1" }, { "binary_name": "liblzma-doc", "binary_version": "5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1" }, { "binary_name": "liblzma5", "binary_version": "5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1" }, { "binary_name": "liblzma5-dbgsym", "binary_version": "5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1" }, { "binary_name": "xz-utils", "binary_version": "5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1" }, { "binary_name": "xz-utils-dbgsym", "binary_version": "5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1" }, { "binary_name": "xzdec", "binary_version": "5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1" }, { "binary_name": "xzdec-dbgsym", "binary_version": "5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "liblzma-dev", "binary_version": "5.2.2-1.3ubuntu0.1" }, { "binary_name": "liblzma-doc", "binary_version": "5.2.2-1.3ubuntu0.1" }, { "binary_name": "liblzma5", "binary_version": "5.2.2-1.3ubuntu0.1" }, { "binary_name": "liblzma5-dbgsym", "binary_version": "5.2.2-1.3ubuntu0.1" }, { "binary_name": "xz-utils", "binary_version": "5.2.2-1.3ubuntu0.1" }, { "binary_name": "xz-utils-dbgsym", "binary_version": "5.2.2-1.3ubuntu0.1" }, { "binary_name": "xzdec", "binary_version": "5.2.2-1.3ubuntu0.1" }, { "binary_name": "xzdec-dbgsym", "binary_version": "5.2.2-1.3ubuntu0.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "liblzma-dev", "binary_version": "5.2.4-1ubuntu1.1" }, { "binary_name": "liblzma-doc", "binary_version": "5.2.4-1ubuntu1.1" }, { "binary_name": "liblzma5", "binary_version": "5.2.4-1ubuntu1.1" }, { "binary_name": "liblzma5-dbgsym", "binary_version": "5.2.4-1ubuntu1.1" }, { "binary_name": "xz-utils", "binary_version": "5.2.4-1ubuntu1.1" }, { "binary_name": "xz-utils-dbgsym", "binary_version": "5.2.4-1ubuntu1.1" }, { "binary_name": "xzdec", "binary_version": "5.2.4-1ubuntu1.1" }, { "binary_name": "xzdec-dbgsym", "binary_version": "5.2.4-1ubuntu1.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "liblzma-dev", "binary_version": "5.2.5-2ubuntu1" }, { "binary_name": "liblzma-doc", "binary_version": "5.2.5-2ubuntu1" }, { "binary_name": "liblzma5", "binary_version": "5.2.5-2ubuntu1" }, { "binary_name": "liblzma5-dbgsym", "binary_version": "5.2.5-2ubuntu1" }, { "binary_name": "xz-utils", "binary_version": "5.2.5-2ubuntu1" }, { "binary_name": "xz-utils-dbgsym", "binary_version": "5.2.5-2ubuntu1" }, { "binary_name": "xzdec", "binary_version": "5.2.5-2ubuntu1" }, { "binary_name": "xzdec-dbgsym", "binary_version": "5.2.5-2ubuntu1" } ], "availability": "No subscription required" }