Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-37439 EUVD-2022-40066GHSA-mg48-gp9q-6j63

Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input

Published Aug 16, 2022 · Updated Sep 16, 2024 · Assigned by Splunk

Description

In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result in a crash of the application. Attempts to restart the application would result in a crash and would require manually removing the malformed file.

Affected products

VendorProductAffectedFixed
Splunk Splunk Enterprise 8.2 – < 8.2.7.1, 8.1 – < 8.1.11 8.2.7.1
Splunk Universal Forwarders 8.1.11, 8.2 – < 8.2.7.1 8.2.7.1

References