Vulnerabilities > CVE-2022-36227 - NULL Pointer Dereference vulnerability in multiple products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

NVD

Published: 2022-11-22

Updated: 2024-03-27

Summary

In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."

Vulnerable Configurations

Part	Description	Count
Application	Libarchive Libarchive Libarchive 3.0.0A Libarchive Libarchive 3.0.1B Libarchive Libarchive 3.0.2 Libarchive Libarchive 3.0.3 Libarchive Libarchive 3.0.4 Libarchive Libarchive 3.1.0 Libarchive Libarchive 3.1.1 Libarchive Libarchive 3.1.2 Libarchive Libarchive 3.1.900A Libarchive Libarchive 3.1.901A Libarchive Libarchive 3.2.0 Libarchive Libarchive 3.2.1 Libarchive Libarchive 3.2.2 Libarchive Libarchive 3.3.0 Libarchive Libarchive 3.3.1 Libarchive Libarchive 3.3.2 Libarchive Libarchive 3.3.3 Libarchive Libarchive 3.4.0 Libarchive Libarchive 3.4.1 Libarchive Libarchive 3.4.2 Libarchive Libarchive 3.4.3 Libarchive Libarchive 3.5.0 Libarchive Libarchive 3.5.1 Libarchive Libarchive 3.5.2 Libarchive Libarchive 3.5.3 Libarchive Libarchive 3.6.0 Libarchive Libarchive 3.6.1	28
Application	Splunk Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder 9.0.0 Splunk Universal Forwarder 9.0.1 Splunk Universal Forwarder 9.0.2 Splunk Universal Forwarder 9.0.3 Splunk Universal Forwarder 9.0.4 Splunk Universal Forwarder 9.0.5 Splunk Universal Forwarder 8.2.0 Splunk Universal Forwarder 8.2.6 Splunk Universal Forwarder 8.2.7 Splunk Universal Forwarder 8.2.8 Splunk Universal Forwarder 8.2.9 Splunk Universal Forwarder 8.2.10 Splunk Universal Forwarder 8.2.11	14
OS	Debian Debian Debian Linux 10.0	1
OS	Fedoraproject Fedoraproject Fedora 37	1

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References