8.8

CVE-2022-1271: debian debian_linux

CVSS: 8.8v3.1HighModified
AliasesALPINE-CVE-2022-1271MGASA-2022-0149SUSE-SU-2022:1158-1
Published 31-08-2022Last modified 14-10-2026
Open JSON

Vulnerability summary

CVE-2022-1271 is a high (CVSS 8.8) vulnerability in debian debian_linux. EPSS estimates a 5.21% chance of exploitation in the next 30 days, higher than 92.4% of scored vulnerabilities.

Overall risk
36/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
5.21%
0%100%
Low · +0.13 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2
RHSA-2022:4896RHSA-2022:5439

Timeline

  1. 31-08-2022
    PublishedVulnerability first disclosed.
  2. 14-10-2026
    Last modifiedVulnerability information updated.

Description

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

5.21%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

+0.13 pp

From 5.07% on 19-09-2026

19-09-202619-10-2026
EPSS score
5.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse78 products
  • gzip&distro=HPE Helion OpenStack 8< 1.6-9.6.2 | < 1.6-9.9.1
  • gzip&distro=SUSE Enterprise Storage 6< 1.10-150000.4.12.1 | < 1.10-150000.4.15.1
  • gzip&distro=SUSE Enterprise Storage 7< 1.10-150200.10.1
  • gzip&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 1.10-150000.4.12.1 | < 1.10-150000.4.15.1
  • gzip&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 1.10-150000.4.12.1 | < 1.10-150000.4.15.1
Redhat13 products
  • jboss_data_grid7.0.0
  • gzip< 0:1.5-11.el7_9 | < 0:1.10-9.el9_0 | < 0:1.9-13.el8_5 | < 0:1.9-10.el8_1 | < 0:1.9-10.el8_2 | < 0:1.9-13.el8_4
  • gzip-debuginfo< 0:1.5-11.el7_9 | < 0:1.10-9.el9_0 | < 0:1.9-13.el8_5 | < 0:1.9-10.el8_1 | < 0:1.9-10.el8_2 | < 0:1.9-13.el8_4
  • gzip-debugsource< 0:1.10-9.el9_0 | < 0:1.9-13.el8_5 | < 0:1.9-10.el8_1 | < 0:1.9-10.el8_2 | < 0:1.9-13.el8_4
  • xz< 0:5.2.5-8.el9_0 | < 0:5.2.4-4.el8_6 | < 0:5.2.4-4.el8_2 | < 0:5.2.4-4.el8_4 | < 0:5.2.4-4.el8_1 | < 0:5.2.2-2.el7_9
Opensuse6 products
  • apparmor&distro=openSUSE Tumbleweed< 3.0.4-4.1
  • gzip&distro=openSUSE Leap 15.3< 1.10-150200.10.1
  • gzip&distro=openSUSE Leap 15.4< 1.10-150200.10.1
  • gzip&distro=openSUSE Tumbleweed< 1.12-1.1
  • xz&distro=openSUSE Leap 15.3< 5.2.3-150000.4.7.1
Debian3 products
  • gzip< 1.9-3+deb10u1 | < 1.10-4+deb11u1 | < 1.6-5+deb9u1 | < 1.12-1
  • xz-utils< 5.2.4-1+deb10u1 | < 5.2.5-2.1~deb11u1 | < 5.2.2-1.2+deb9u1 | < 5.2.5-2.1
  • debian_linuxEOL10.0
Alpine2 products
  • gzip< 1.12-r0
  • xz< 5.2.5-r1
Mageia2 products
  • gzip< 1.10-4.1.mga8
  • xz< 5.2.5-2.1.mga8
Ubuntu2 products
  • gzip< 1.10-4ubuntu4 | < 1.6-5ubuntu1.2 | < 1.10-0ubuntu4.1 | < 1.6-3ubuntu1+esm1 | < 1.6-4ubuntu1+esm1
  • xz-utils< 5.2.5-2ubuntu1 | < 5.2.2-1.3ubuntu0.1 | < 5.2.4-1ubuntu1.1 | < 5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1 | < 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1
Gnu1 product
Tukaani1 product

9 vendors · 108 products

References

66 links
Show all 66 references