VulnerableCode Package Details - pkg:deb/debian/gzip@1.6-4

Search for packages

Vulnerability	Summary	Fixed by
VCID-zgc5-nzyz-aaan Aliases: CVE-2022-1271	An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.	1.9-3+deb10u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.10-4+deb11u1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-zgc5-nzyz-aaan
Aliases:
CVE-2022-1271

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

1.9-3+deb10u1
Affected by 1 other vulnerability.

1.10-4+deb11u1
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-06-21T13:44:10.480713+00:00	Debian Oval Importer	Affected by	VCID-zgc5-nzyz-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-20T20:32:33.959049+00:00	Debian Oval Importer	Affected by	VCID-zgc5-nzyz-aaan	None	36.1.3
2025-06-08T06:38:20.950898+00:00	Debian Oval Importer	Affected by	VCID-zgc5-nzyz-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-07T14:05:41.271613+00:00	Debian Oval Importer	Affected by	VCID-zgc5-nzyz-aaan	None	36.1.0
2025-04-12T21:51:51.892223+00:00	Debian Oval Importer	Affected by	VCID-zgc5-nzyz-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-08T05:10:47.262871+00:00	Debian Oval Importer	Affected by	VCID-zgc5-nzyz-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-07T12:39:30.651320+00:00	Debian Oval Importer	Affected by	VCID-zgc5-nzyz-aaan	None	36.0.0