DEBIAN-CVE-2022-47112
- Source
- https://security-tracker.debian.org/tracker/CVE-2022-47112
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-47112.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2022-47112
- Upstream
- Published
- 2025-04-19T21:15:45.430Z
- Modified
- 2025-11-20T10:16:07.310920Z
- Severity
-
- 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected.
- References
Affected packages
Debian:11
p7zip
Debian:12
7zip
Package
- Name
- 7zip
- Purl
- pkg:deb/debian/7zip?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
22.*
22.01+dfsg-8
22.01+dfsg-8+deb12u1
22.01+dfsg-9
22.01+dfsg-10~exp1
23.*
23.01+dfsg-1
23.01+dfsg-2
23.01+dfsg-3
23.01+dfsg-4~exp1
23.01+dfsg-4
23.01+dfsg-5
23.01+dfsg-6
23.01+dfsg-7
23.01+dfsg-8
23.01+dfsg-9
23.01+dfsg-10
23.01+dfsg-11
23.01+dfsg-12
24.*
24.05+dfsg-1
24.05+dfsg-2
24.05+dfsg-3
24.06+dfsg-1
24.06+dfsg-2
24.06+dfsg-3
24.06+dfsg-4
24.07+dfsg-1
24.07+dfsg-2
24.08+dfsg-1~bpo12+1
24.08+dfsg-1
24.08+dfsg-2
24.09+dfsg-1
24.09+dfsg-2~bpo12+1
24.09+dfsg-2
24.09+dfsg-3
24.09+dfsg-4
24.09+dfsg-5
24.09+dfsg-6
24.09+dfsg-7~bpo12+1
24.09+dfsg-7
24.09+dfsg-8~bpo12+1
24.09+dfsg-8
25.*
25.00+dfsg-1
25.01+dfsg-1~deb13u1
25.01+dfsg-1
25.01+dfsg-2
25.01+dfsg-3
25.01+dfsg-4