USN-5378-2 xz-utils vulnerability

🗓️ 13 Apr 2022 12:45:29Reported by GoogleType

osv

osv🔗 osv.dev

Xz utilities vulnerability allows remote overwriting files via crafted filenames in xzgrep.

Reporter	Title	Published	Views	Family All 359
ALT Linux	Security fix for the ALT Linux 9 package gzip version 1.10-alt1.p9.1	10 Apr 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package gzip version 1.12-alt1	11 Apr 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities.	22 Nov 202206:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	9 Nov 202218:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security bypass in GNU Gzip (CVE-2022-1271)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in base image packages	7 Oct 202220:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Cloud Pak for Watson AIOPs	3 Oct 202218:44	–	ibm

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-5378-2
ubuntu	www.ubuntu.com/security/CVE-2022-1271

22 Apr 2026 10:23Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.8

EPSS0.00813

SSVC

Xz utilities crafted filenames xzgrep remote file overwrite security vulnerability