Summary
Cleemy Desu Wayo discovered that Gzip incorrectly handled certain
filenames. If a user or automated system were tricked into performing zgrep
operations with specially crafted filenames, a remote attacker could
overwrite arbitrary files.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | gzip | 1.6-5ubuntu1.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | gzip | 1.10-0ubuntu4.1 |
Vulnerabilities 1
-
High 8.8
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…
References
-
report
https://ubuntu.com/security/CVE-2022-1271