CVE-2022-47111
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-47111
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-47111.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-47111
- Downstream
- Published
- 2025-04-19T21:15:45Z
- Modified
- 2025-08-18T19:14:08.568967Z
- Severity
-
- 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected.
- References
Affected packages
Debian:12 / 7zip
Package
- Name
- 7zip
- Purl
- pkg:deb/debian/7zip?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
22.*
22.01+dfsg-8
22.01+dfsg-8+deb12u1
22.01+dfsg-9
22.01+dfsg-10~exp1
23.*
23.01+dfsg-1
23.01+dfsg-2
23.01+dfsg-3
23.01+dfsg-4~exp1
23.01+dfsg-4
23.01+dfsg-5
23.01+dfsg-6
23.01+dfsg-7
23.01+dfsg-8
23.01+dfsg-9
23.01+dfsg-10
23.01+dfsg-11
23.01+dfsg-12
24.*
24.05+dfsg-1
24.05+dfsg-2
24.05+dfsg-3
24.06+dfsg-1
24.06+dfsg-2
24.06+dfsg-3
24.06+dfsg-4
24.07+dfsg-1
24.07+dfsg-2
24.08+dfsg-1~bpo12+1
24.08+dfsg-1
24.08+dfsg-2
24.09+dfsg-1
24.09+dfsg-2~bpo12+1
24.09+dfsg-2
24.09+dfsg-3
24.09+dfsg-4
24.09+dfsg-5
24.09+dfsg-6
24.09+dfsg-7~bpo12+1
24.09+dfsg-7
24.09+dfsg-8~bpo12+1
24.09+dfsg-8
25.*
25.00+dfsg-1
25.01+dfsg-1
Debian:13 / 7zip
Package
- Name
- 7zip
- Purl
- pkg:deb/debian/7zip?arch=source
Debian:14 / 7zip
Package
- Name
- 7zip
- Purl
- pkg:deb/debian/7zip?arch=source
Debian:11 / p7zip
Package
- Name
- p7zip
- Purl
- pkg:deb/debian/p7zip?arch=source
Debian:12 / p7zip
Package
- Name
- p7zip
- Purl
- pkg:deb/debian/p7zip?arch=source
Debian:13 / p7zip
Package
- Name
- p7zip
- Purl
- pkg:deb/debian/p7zip?arch=source
Debian:14 / p7zip
Package
- Name
- p7zip
- Purl
- pkg:deb/debian/p7zip?arch=source