CVE-2022-1271 is an arbitrary file write vulnerability in GNU gzip's zgrep utility, affecting products like Debian, GNU, Red Hat, and Tukaani. This flaw allows a remote, low-privileged attacker to overwrite arbitrary files on a system due to insufficient validation of crafted multi-line filenames containing embedded content and target file names. With a CVSS score of 8.8 (High), the vulnerability poses a significant risk with high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.12CPE matchmatch criteria | cpe:2.3:a:gnu:gzip:*:*:*:*:*:*:*:* | ||
7.0.0CPE matchmatch criteria | cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:* | ||
10.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | ||
< 5.2.5CPE matchmatch criteria | cpe:2.3:a:tukaani:xz:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2022-1271
Sep 13, 2022An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example a crafted file name) this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote low privileged attacker to force zgrep to write arbitrary files on the system.
Aug 9, 2022gzip: arbitrary-file-write vulnerability
Apr 7, 2022