CVE-2022-47111: Low severity 7-Zip 7-Zip vulnerability
Published Apr 19, 2025
·Updated
7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected.
Affected Software
9 affected componentsFixes available
7-Zip 7-Zip=22.01
7-Zip 7-Zip=22.01
debian/7zip*
debian/7zip*
debian/7zip*
debian/p7zip*
debian/p7zip<16.02+transitional.1
16.02+transitional.1
debian/7zip<=22.01+really26.01+dfsg-0+deb12u1, <=22.01+really26.02+dfsg-0+deb12u1, <=25.01+dfsg-1~deb13u2, <=26.05+dfsg-1
debian/p7zip<=16.02+really26.01+dfsg-0+deb12u1, <=16.02+really26.02+dfsg-0+deb12u1
16.02+transitional.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/p7zipto a version that resolves this vulnerability.Fixed in 16.02+transitional.1
Event History
Apr 19, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·09:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-47111?
The severity of CVE-2022-47111 is classified as medium.
2
How do I fix CVE-2022-47111?
To fix CVE-2022-47111, upgrade to 7-Zip version 24.10 or later.
3
What does CVE-2022-47111 affect?
CVE-2022-47111 affects 7-Zip versions up to and including 24.09.
4
What type of files does CVE-2022-47111 involve?
CVE-2022-47111 involves certain invalid xz files, specifically those dealing with block flags and reserved bits.
5
Is CVE-2022-47111 exploitable?
CVE-2022-47111 may cause unintended behavior but is not directly exploitable for remote code execution.