CVE-2022-36227
CRITICAL
Published Nov 22, 20223y ago · Modified Jun 17, 20261w ago
9.8 CVSS 3.1
Published Nov 22, 2022 3y ago
Last Modified Jun 17, 2026 1w ago
Description
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-476 NULL Pointer Dereference Memory Safety
Affected Products 6
| Vendor | Product | Version | Range |
|---|---|---|---|
| libarchive | libarchive | * | ≥3.0.0 – <3.6.2 |
| debian | debian_linux | 10.0 | any |
| fedoraproject | fedora | 37 | any |
| splunk | universal_forwarder | * | ≥8.2.0 – <8.2.12 |
| splunk | universal_forwarder | * | ≥9.0.0 – <9.0.6 |
| splunk | universal_forwarder | 9.1.0 | any |
References 7
- bugs.gentoo.org https://bugs.gentoo.org/882521
- github.com https://github.com/libarchive/libarchive/blob/v3.0.0a/libarchive/archive_write.c#L215
- github.com https://github.com/libarchive/libarchive/issues/1754
- lists.debian.org https://lists.debian.org/debian-lts-announce/2023/01/msg00034.html
- lists.debian.org https://lists.debian.org/debian-lts-announce/2024/11/msg00007.html
- lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V67OO2UUQAUJS3IK4JZPF6F3LUCBU6IS/
- security.gentoo.org https://security.gentoo.org/glsa/202309-14
Remediation
- bugs.gentoo.org https://bugs.gentoo.org/882521
- github.com https://github.com/libarchive/libarchive/issues/1754