Known vulnerabilities in xz-utils (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:xz-utils_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xz-utils (Debian package) xz-utils (Debian package) is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106970 - Heap-based Buffer Overflow
CVE-2025-31115
CWE-122 High
No
No
5.4.1-1 03.04.2025 SB20250403127
SB20250403129
SB20250403137
and 19 more
#VU62002 - Improper input validation
CVE-2022-1271
CWE-20 High
No
No
5.2.4-1+deb10u1, 5.2.5-2.1~deb11u1 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more