GNU Gzip, XZ Utils: Arbitrary file write

🗓️ 07 Sep 2022 00:00:00Reported by Gentoo FoundationType

gentoo

gentoo🔗 security.gentoo.org👁 41 Views

Arbitrary file write vulnerability in GNU Gzip and XZ Util

Reporter	Title	Published	Views	Family All 360
ALT Linux	Security fix for the ALT Linux 9 package gzip version 1.10-alt1.p9.1	10 Apr 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package gzip version 1.12-alt1	11 Apr 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities.	22 Nov 202206:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	9 Nov 202218:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security bypass in GNU Gzip (CVE-2022-1271)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in base image packages	7 Oct 202220:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Cloud Pak for Watson AIOPs	3 Oct 202218:44	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Gentoo	any	all	app-arch/gzip	1.12	UNKNOWN
Gentoo	any	all	app-arch/xz-utils	5.2.5	UNKNOWN

07 Sep 2022 00:00Current

1.6Low risk

Vulners AI Score1.6

CVSS 3.18.8

EPSS0.00813

SSVC

data compression file validation remote code execution