Riskcovery

CVE-2022-37439

Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input

State
Published
Severity
5.5 Medium
Published
Aug 16, 2022
Updated
Sep 16, 2024
Reserved
Aug 5, 2022

Read the record on cve.org

Description

In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result in a crash of the application. Attempts to restart the application would result in a crash and would require manually removing the malformed file.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSplunk

Weaknesses

Affected Products

ProductVersions
Splunk EnterpriseSplunk
  • 8.2 to before 8.2.7.1Affected
  • 8.1 to before 8.1.11Affected
Universal ForwardersSplunk
  • 8.1.11Affected
  • 8.2 to before 8.2.7.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.