Out-of-bounds read in p7zip - CVE-2022-47069

Vulnerability identifier: #VU118786

CSH Severity: Medium

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-47069

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the NArchive::NZip::CInArchive::FindCd() function in CPP/7zip/Archive/Zip/ZipIn.cpp. A remote attacker can create a specially crafted archive, trick the victim into opening it, trigger an out-of-bounds read error and read contents of memory on the system.

p7zip
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Basesystem Module
openSUSE Leap
p7zip
p7zip-full-debuginfo
p7zip-full
p7zip-debugsource
p7zip-doc

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

p7zip - update to 16.02-150200.14.15.1
p7zip-full-debuginfo - update to 16.02-150200.14.15.1
p7zip-full - update to 16.02-150200.14.15.1
p7zip-debugsource - update to 16.02-150200.14.15.1
p7zip-doc - update to 16.02-150200.14.15.1

• https://sourceforge.net/p/p7zip/bugs/241/

• Information disclosure in p7zip
• SUSE update for p7zip