CVE-2022-37439

published 2022-08-16

CVE-2022-37439: In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result…

Priority P4 21 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result in a crash of the application. Attempts to restart the application would result in a crash and would require manually removing the malformed file.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
splunk	splunk	>= 8.1.0 < 8.1.11	8.1.11
splunk	splunk	>= 8.2.0 < 8.2.7.1	8.2.7.1
splunk	splunk_enterprise	>= 8.1 < 8.1.11	8.1.11
splunk	splunk_enterprise	>= 8.2 < 8.2.7.1	8.2.7.1
splunk	universal_forwarder	>= 8.1.0 < 8.1.11	8.1.11
splunk	universal_forwarder	>= 8.2.0 < 8.2.7.1	8.2.7.1
splunk	universal_forwarders	—	—
splunk	universal_forwarders	>= 8.2 < 8.2.7.1	8.2.7.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-409