UBUNTU-CVE-2022-47111

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2022-47111

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-47111.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2022-47111

Related

CVE-2022-47111

Published

2025-04-19T21:15:00Z

Modified

2025-06-03T17:39:47Z

Severity

2.5 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

[none]

Details

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected.

References

Affected packages

Ubuntu:Pro:14.04:LTS / p7zip

Package

Name: p7zip
Purl: pkg:deb/ubuntu/p7zip@9.20.1~dfsg.1-4+deb7u3build0.14.04.1?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.20.1~dfsg.1-4

9.20.1~dfsg.1-4+deb7u1build0.14.04.1

9.20.1~dfsg.1-4+deb7u2build0.14.04.1

9.20.1~dfsg.1-4+deb7u3build0.14.04.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / p7zip

Package

Name: p7zip
Purl: pkg:deb/ubuntu/p7zip@9.20.1~dfsg.1-4.2ubuntu0.1?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.20.1~dfsg.1-4.2

9.20.1~dfsg.1-4.2ubuntu0.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / p7zip

Package

Name: p7zip
Purl: pkg:deb/ubuntu/p7zip@16.02+dfsg-6?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

16.*

16.02+dfsg-4

16.02+dfsg-5

16.02+dfsg-6

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:20.04:LTS / p7zip

Package

Name: p7zip
Purl: pkg:deb/ubuntu/p7zip@16.02+dfsg-7build1?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

16.*

16.02+dfsg-7

16.02+dfsg-7build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / 7zip

Package

Name: 7zip
Purl: pkg:deb/ubuntu/7zip@21.07+dfsg-4?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

21.*

21.03~beta+dfsg-6

21.04~beta+dfsg-1

21.06+dfsg-1

21.07+dfsg-1

21.07+dfsg-2

21.07+dfsg-3

21.07+dfsg-4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / p7zip

Package

Name: p7zip
Purl: pkg:deb/ubuntu/p7zip@16.02+dfsg-8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

16.*

16.02+dfsg-8

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / 7zip

Package

Name: 7zip
Purl: pkg:deb/ubuntu/7zip@24.08+dfsg-1?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

23.*

23.01+dfsg-11

23.01+dfsg-12

24.*

24.05+dfsg-3

24.06+dfsg-2

24.06+dfsg-3

24.06+dfsg-4

24.07+dfsg-1

24.07+dfsg-2

24.08+dfsg-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / 7zip

Package

Name: 7zip
Purl: pkg:deb/ubuntu/7zip@23.01+dfsg-11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

23.*

23.01+dfsg-3

23.01+dfsg-7

23.01+dfsg-8

23.01+dfsg-11

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / p7zip

Package

Name: p7zip
Purl: pkg:deb/ubuntu/p7zip@16.02+transitional.1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

16.02+transitional.1

Affected versions

16.*

16.02+dfsg-8

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "p7zip",
            "binary_version": "16.02+transitional.1"
        },
        {
            "binary_name": "p7zip-full",
            "binary_version": "16.02+transitional.1"
        }
    ],
    "ubuntu_priority": "medium",
    "availability": "No subscription required"
}

Ubuntu:25.04 / 7zip

Package

Name: 7zip
Purl: pkg:deb/ubuntu/7zip@24.09+dfsg-7?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

24.*

24.08+dfsg-1

24.08+dfsg-2

24.09+dfsg-2

24.09+dfsg-3

24.09+dfsg-4

24.09+dfsg-5

24.09+dfsg-6

24.09+dfsg-7

Ecosystem specific

{
    "ubuntu_priority": "medium"
}