CVE-2022-1271
Fixed in a distro release EPSS 6%CVSS 8.8
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.
Products: Siemens RUGGEDCOM APE1808, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | gzip | 1.9-13.el8_5 |
| AlmaLinux 8 | xz | 5.2.4-4.el8_6 |
| AlmaLinux 8 | xz-devel | 5.2.4-4.el8_6 |
| AlmaLinux 8 | xz-libs | 5.2.4-4.el8_6 |
| AlmaLinux 8 | xz-lzma-compat | 5.2.4-4.el8_6 |
| AlmaLinux 9 | xz | 5.2.5-8.el9_0 |
| AlmaLinux 9 | xz-devel | 5.2.5-8.el9_0 |
| AlmaLinux 9 | xz-libs | 5.2.5-8.el9_0 |
| AlmaLinux 9 | xz-lzma-compat | 5.2.5-8.el9_0 |
| Alpine 3.12 | gzip | 1.12-r0 |
| Alpine 3.12 | xz | 5.2.5-r1 |
| Alpine 3.13 | gzip | 1.12-r0 |
| Alpine 3.13 | xz | 5.2.5-r1 |
| Alpine 3.14 | gzip | 1.12-r0 |
| Alpine 3.14 | xz | 5.2.5-r1 |
| Alpine 3.15 | gzip | 1.12-r0 |
| Alpine 3.15 | xz | 5.2.5-r1 |
| Alpine 3.16 | gzip | 1.12-r0 |
| Alpine 3.16 | xz | 5.2.5-r1 |
| Alpine 3.17 | gzip | 1.12-r0 |
| Alpine 3.17 | xz | 5.2.5-r1 |
| Alpine 3.18 | gzip | 1.12-r0 |
| Alpine 3.18 | xz | 5.2.5-r1 |
| Alpine 3.19 | gzip | 1.12-r0 |
| Alpine 3.19 | xz | 5.2.5-r1 |
| Alpine 3.20 | gzip | 1.12-r0 |
| Alpine 3.20 | xz | 5.2.5-r1 |
| Alpine 3.21 | gzip | 1.12-r0 |
| Alpine 3.21 | xz | 5.2.5-r1 |
| Alpine 3.22 | gzip | 1.12-r0 |
| Alpine 3.22 | xz | 5.2.5-r1 |
| Alpine 3.23 | gzip | 1.12-r0 |
| Alpine 3.23 | xz | 5.2.5-r1 |
| Alpine 3.24 | gzip | 1.12-r0 |
| Alpine 3.24 | xz | 5.2.5-r1 |
| Arch Linux | gzip | 1.12-1 |
| Arch Linux | xz | 5.2.5-3 |
| Debian 10 | gzip | 1.9-3+deb10u1 |
| Debian 10 | xz-utils | 5.2.4-1+deb10u1 |
| Debian 11 | gzip | 1.10-4+deb11u1 |
| Debian 11 | xz-utils | 5.2.5-2.1~deb11u1 |
| Debian 12 | gzip | 1.12-1 |
| Debian 12 | xz-utils | 5.2.5-2.1 |
| Debian 13 | gzip | 1.12-1 |
| Debian 13 | xz-utils | 5.2.5-2.1 |
| Debian 14 | gzip | 1.12-1 |
| Debian 14 | xz-utils | 5.2.5-2.1 |
| Debian 9 | gzip | 1.6-5+deb9u1 |
| Debian 9 | xz-utils | 5.2.2-1.2+deb9u1 |
| Red Hat Enterprise Linux 7 | gzip | 0:1.5-11.el7_9 |
| Red Hat Enterprise Linux 7 | gzip-debuginfo | 0:1.5-11.el7_9 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host | 0:4.3.23-20220622.0.el7_9 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host-image-update | 0:4.3.23-20220622.0.el7_9 |
| Red Hat Enterprise Linux 7 | xz | 0:5.2.2-2.el7_9 |
| Red Hat Enterprise Linux 7 | xz-compat-libs | 0:5.2.2-2.el7_9 |
| Red Hat Enterprise Linux 7 | xz-debuginfo | 0:5.2.2-2.el7_9 |
| Red Hat Enterprise Linux 7 | xz-devel | 0:5.2.2-2.el7_9 |
| Red Hat Enterprise Linux 7 | xz-libs | 0:5.2.2-2.el7_9 |
| Red Hat Enterprise Linux 7 | xz-lzma-compat | 0:5.2.2-2.el7_9 |
| Red Hat Enterprise Linux 8 | gzip | 0:1.9-13.el8_5 |
| Red Hat Enterprise Linux 8 | gzip-debuginfo | 0:1.9-13.el8_5 |
| Red Hat Enterprise Linux 8 | gzip-debugsource | 0:1.9-13.el8_5 |
| Red Hat Enterprise Linux 8 | xz | 0:5.2.4-4.el8_6 |
| Red Hat Enterprise Linux 8 | xz-debuginfo | 0:5.2.4-4.el8_6 |
| Red Hat Enterprise Linux 8 | xz-debugsource | 0:5.2.4-4.el8_6 |
| Red Hat Enterprise Linux 8 | xz-devel | 0:5.2.4-4.el8_6 |
| Red Hat Enterprise Linux 8 | xz-libs | 0:5.2.4-4.el8_6 |
| Red Hat Enterprise Linux 8 | xz-libs-debuginfo | 0:5.2.4-4.el8_6 |
| Red Hat Enterprise Linux 8 | xz-lzma-compat | 0:5.2.4-4.el8_6 |
| Red Hat Enterprise Linux 8 | xz-lzma-compat-debuginfo | 0:5.2.4-4.el8_6 |
| Red Hat Enterprise Linux 9 | gzip | 0:1.10-9.el9_0 |
| Red Hat Enterprise Linux 9 | gzip-debuginfo | 0:1.10-9.el9_0 |
| Red Hat Enterprise Linux 9 | gzip-debugsource | 0:1.10-9.el9_0 |
| Red Hat Enterprise Linux 9 | xz | 0:5.2.5-8.el9_0 |
| Red Hat Enterprise Linux 9 | xz-debuginfo | 0:5.2.5-8.el9_0 |
| Red Hat Enterprise Linux 9 | xz-debugsource | 0:5.2.5-8.el9_0 |
| Red Hat Enterprise Linux 9 | xz-devel | 0:5.2.5-8.el9_0 |
| Red Hat Enterprise Linux 9 | xz-libs | 0:5.2.5-8.el9_0 |
| Red Hat Enterprise Linux 9 | xz-libs-debuginfo | 0:5.2.5-8.el9_0 |
| Red Hat Enterprise Linux 9 | xz-lzma-compat | 0:5.2.5-8.el9_0 |
| Red Hat Enterprise Linux 9 | xz-lzma-compat-debuginfo | 0:5.2.5-8.el9_0 |
| Red Hat rhel e4s 8.1 | gzip | 0:1.9-10.el8_1 |
| Red Hat rhel e4s 8.1 | gzip-debuginfo | 0:1.9-10.el8_1 |
| Red Hat rhel e4s 8.1 | gzip-debugsource | 0:1.9-10.el8_1 |
| Red Hat rhel e4s 8.1 | xz | 0:5.2.4-4.el8_1 |
| Red Hat rhel e4s 8.1 | xz-debuginfo | 0:5.2.4-4.el8_1 |
| Red Hat rhel e4s 8.1 | xz-debugsource | 0:5.2.4-4.el8_1 |
| Red Hat rhel e4s 8.1 | xz-devel | 0:5.2.4-4.el8_1 |
| Red Hat rhel e4s 8.1 | xz-libs | 0:5.2.4-4.el8_1 |
| Red Hat rhel e4s 8.1 | xz-libs-debuginfo | 0:5.2.4-4.el8_1 |
| Red Hat rhel e4s 8.1 | xz-lzma-compat-debuginfo | 0:5.2.4-4.el8_1 |
| Red Hat rhel eus 8.2 | gzip | 0:1.9-10.el8_2 |
| Red Hat rhel eus 8.2 | gzip-debuginfo | 0:1.9-10.el8_2 |
| Red Hat rhel eus 8.2 | gzip-debugsource | 0:1.9-10.el8_2 |
| Red Hat rhel eus 8.2 | xz | 0:5.2.4-4.el8_2 |
| Red Hat rhel eus 8.2 | xz-debuginfo | 0:5.2.4-4.el8_2 |
| Red Hat rhel eus 8.2 | xz-debugsource | 0:5.2.4-4.el8_2 |
| Red Hat rhel eus 8.2 | xz-devel | 0:5.2.4-4.el8_2 |
| Red Hat rhel eus 8.2 | xz-libs | 0:5.2.4-4.el8_2 |
| Red Hat rhel eus 8.2 | xz-libs-debuginfo | 0:5.2.4-4.el8_2 |
| Red Hat rhel eus 8.2 | xz-lzma-compat | 0:5.2.4-4.el8_2 |
| Red Hat rhel eus 8.2 | xz-lzma-compat-debuginfo | 0:5.2.4-4.el8_2 |
| Red Hat rhel eus 8.4 | gzip | 0:1.9-13.el8_4 |
| Red Hat rhel eus 8.4 | gzip-debuginfo | 0:1.9-13.el8_4 |
| Red Hat rhel eus 8.4 | gzip-debugsource | 0:1.9-13.el8_4 |
| Red Hat rhel eus 8.4 | xz | 0:5.2.4-4.el8_4 |
| Red Hat rhel eus 8.4 | xz-debuginfo | 0:5.2.4-4.el8_4 |
| Red Hat rhel eus 8.4 | xz-debugsource | 0:5.2.4-4.el8_4 |
| Red Hat rhel eus 8.4 | xz-devel | 0:5.2.4-4.el8_4 |
| Red Hat rhel eus 8.4 | xz-libs | 0:5.2.4-4.el8_4 |
| Red Hat rhel eus 8.4 | xz-libs-debuginfo | 0:5.2.4-4.el8_4 |
| Red Hat rhel eus 8.4 | xz-lzma-compat | 0:5.2.4-4.el8_4 |
| Red Hat rhel eus 8.4 | xz-lzma-compat-debuginfo | 0:5.2.4-4.el8_4 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host | 0:4.5.0-202205291010_8.6 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host-image-update | 0:4.5.0-202205291010_8.6 |
| Rocky Linux 8 | gzip | 0:1.9-13.el8_5 |
| Rocky Linux 8 | xz | 0:5.2.4-4.el8_6 |
| Rocky Linux 9 | gzip | 0:1.10-9.el9_0 |
| Rocky Linux 9 | xz | 0:5.2.5-8.el9_0 |
| SUSE Enterprise Storage 6 | gzip | 1.10-150000.4.15.1 |
| SUSE Enterprise Storage 6 | gzip | 1.10-150000.4.12.1 |
| SUSE Enterprise Storage 6 | xz | 5.2.3-150000.4.7.1 |
| SUSE Enterprise Storage 7 | gzip | 1.10-150200.10.1 |
| SUSE Enterprise Storage 7 | xz | 5.2.3-150000.4.7.1 |
| SUSE HPE Helion OpenStack 8 | gzip | 1.6-9.9.1 |
| SUSE HPE Helion OpenStack 8 | gzip | 1.6-9.6.2 |
| SUSE HPE Helion OpenStack 8 | xz | 5.0.5-6.7.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | gzip | 1.10-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | gzip | 1.10-150000.4.15.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | gzip | 1.10-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | gzip | 1.10-150000.4.15.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | gzip | 1.10-150000.4.15.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | gzip | 1.10-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | gzip | 1.10-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | gzip | 1.10-150000.4.15.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Micro 5.0 | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise Micro 5.0 | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Micro 5.1 | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise Micro 5.1 | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Micro 5.2 | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise Micro 5.2 | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | xz | 5.0.3-0.12.7.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | xz | 5.0.3-0.12.7.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | gzip | 1.6-9.9.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | gzip | 1.6-9.6.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | xz | 5.0.5-6.7.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | gzip | 1.6-9.9.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | gzip | 1.6-9.6.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | xz | 5.0.5-6.7.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | gzip | 1.6-9.9.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | gzip | 1.6-9.6.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | xz | 5.0.5-6.7.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | gzip | 1.6-9.9.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | gzip | 1.6-9.6.2 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | xz | 5.0.5-6.7.1 |
| SUSE Linux Enterprise Server 12 SP5 | gzip | 1.10-4.11.3 |
| SUSE Linux Enterprise Server 12 SP5 | gzip | 1.10-4.14.1 |
| SUSE Linux Enterprise Server 12 SP5 | xz | 5.0.5-6.7.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | gzip | 1.10-150000.4.12.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | gzip | 1.10-150000.4.15.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | gzip | 1.10-150000.4.12.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | gzip | 1.10-150000.4.15.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Server 15-LTSS | gzip | 1.10-150000.4.15.1 |
| SUSE Linux Enterprise Server 15-LTSS | gzip | 1.10-150000.4.12.1 |
| SUSE Linux Enterprise Server 15-LTSS | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | gzip | 1.6-9.6.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | gzip | 1.6-9.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | xz | 5.0.5-6.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | gzip | 1.6-9.6.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | gzip | 1.6-9.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | xz | 5.0.5-6.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | gzip | 1.10-4.11.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | gzip | 1.10-4.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | xz | 5.0.5-6.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | gzip | 1.10-150000.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | gzip | 1.10-150000.4.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | gzip | 1.10-150000.4.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | gzip | 1.10-150000.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | gzip | 1.10-150200.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | xz | 5.2.3-150000.4.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | xz | 5.0.5-6.7.1 |
| SUSE Manager Proxy 4.1 | gzip | 1.10-150200.10.1 |
| SUSE Manager Proxy 4.1 | xz | 5.2.3-150000.4.7.1 |
| SUSE Manager Retail Branch Server 4.1 | gzip | 1.10-150200.10.1 |
| SUSE Manager Retail Branch Server 4.1 | xz | 5.2.3-150000.4.7.1 |
| SUSE Manager Server 4.1 | gzip | 1.10-150200.10.1 |
| SUSE Manager Server 4.1 | xz | 5.2.3-150000.4.7.1 |
| SUSE OpenStack Cloud 8 | gzip | 1.6-9.9.1 |
| SUSE OpenStack Cloud 8 | gzip | 1.6-9.6.2 |
| SUSE OpenStack Cloud 8 | xz | 5.0.5-6.7.1 |
| SUSE OpenStack Cloud 9 | gzip | 1.6-9.6.2 |
| SUSE OpenStack Cloud 9 | gzip | 1.6-9.9.1 |
| SUSE OpenStack Cloud 9 | xz | 5.0.5-6.7.1 |
| SUSE OpenStack Cloud Crowbar 8 | gzip | 1.6-9.6.2 |
| SUSE OpenStack Cloud Crowbar 8 | gzip | 1.6-9.9.1 |
| SUSE OpenStack Cloud Crowbar 8 | xz | 5.0.5-6.7.1 |
| SUSE OpenStack Cloud Crowbar 9 | gzip | 1.6-9.9.1 |
| SUSE OpenStack Cloud Crowbar 9 | gzip | 1.6-9.6.2 |
| SUSE OpenStack Cloud Crowbar 9 | xz | 5.0.5-6.7.1 |
| Ubuntu 18.04 LTS | gzip | 1.6-5ubuntu1.2 |
| Ubuntu 18.04 LTS | xz-utils | 5.2.2-1.3ubuntu0.1 |
| Ubuntu 20.04 LTS | gzip | 1.10-0ubuntu4.1 |
| Ubuntu 20.04 LTS | xz-utils | 5.2.4-1ubuntu1.1 |
| Ubuntu 22.04 LTS | gzip | 1.10-4ubuntu4 |
| Ubuntu 22.04 LTS | xz-utils | 5.2.5-2ubuntu1 |
| Ubuntu Pro 14.04 LTS | gzip | 1.6-3ubuntu1+esm1 |
| Ubuntu Pro 14.04 LTS | xz-utils | 5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1 |
| Ubuntu Pro 16.04 LTS | gzip | 1.6-4ubuntu1+esm1 |
| Ubuntu Pro 16.04 LTS | xz-utils | 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1 |
| openSUSE Leap 15.3 | gzip | 1.10-150200.10.1 |
| openSUSE Leap 15.3 | xz | 5.2.3-150000.4.7.1 |
| openSUSE Leap 15.4 | gzip | 1.10-150200.10.1 |
| openSUSE Tumbleweed | apparmor | 3.0.4-4.1 |
| openSUSE Tumbleweed | gzip | 1.12-1.1 |
| openSUSE Tumbleweed | xz | 5.2.6-1.1 |