Summary
Cleemy Desu Wayo discovered that XZ Utils incorrectly handled certain
filenames. If a user or automated system were tricked into performing
xzgrep operations with specially crafted filenames, a remote attacker could
overwrite arbitrary files.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | xz-utils | 5.2.2-1.3ubuntu0.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | xz-utils | 5.2.4-1ubuntu1.1 |
Vulnerabilities 1
-
High 8.8
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…
References
-
report
https://ubuntu.com/security/CVE-2022-1271