CVE-2022-43572

🗓️ 04 Nov 2022 22:23:39Reported by SplunkType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 77 Views

Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2 are susceptible to denial-of-service via malformed file

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-43572	1 May 202520:15	–	circl
CNNVD	Splunk 代码注入漏洞	2 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-43572 Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise	4 Nov 202222:23	–	cvelist
EUVD	EUVD-2022-46568	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Splunk Enterprise	3 Nov 202200:00	–	ncsc
NVD	CVE-2022-43572	4 Nov 202223:15	–	nvd
Prion	Design/Logic Flaw	4 Nov 202223:15	–	prion
Positive Technologies	PT-2022-26975 · Splunk · Splunk Enterprise	4 Nov 202200:00	–	ptsecurity
Tenable Nessus	Splunk Enterprise 8.1 < 8.1.12, 8.2.0 < 8.2.9, 9.0.0 < 9.0.2 (SVD-2022-1112)	3 Nov 202200:00	–	nessus
Vulnrichment	CVE-2022-43572 Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise	4 Nov 202222:23	–	vulnrichment

NVD

Node

splunk splunkRange8.1.0–8.1.12enterprise

splunk splunkRange8.2.0–8.2.9enterprise

splunk splunkRange9.0.0–9.0.2enterprise

splunk splunk_cloud_platformRange<9.0.2209

[
  {
    "defaultStatus": "affected",
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "lessThan": "8.1.12",
        "status": "affected",
        "version": "8.1",
        "versionType": "custom"
      },
      {
        "lessThan": "8.2.9",
        "status": "affected",
        "version": "8.2",
        "versionType": "custom"
      },
      {
        "lessThan": "9.0.2",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      }
    ]
  }
]