CVE-2022-36227
Critical
Description
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
SeverityCritical
CVSS9.8
Exploit probability—
Product
Libarchive
PublishedNov 22, 2022
First seenNov 22, 2022
How to fix
Update
- libarchive libarchive3.6.2 or later
- splunk universal_forwarder8.2.12, 9.0.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libarchive libarchive | 3.0.0 ≤ v < 3.6.2 | 3.6.2 |
| debian debian_linux | 10.0 | — |
| fedoraproject fedora | 37 | — |
| splunk universal_forwarder | 8.2.0 ≤ v < 8.2.12, 9.0.0 ≤ v < 9.0.6, 9.1.0 | 8.2.12, 9.0.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.