CVE-2022-36227 Null dereference in n/a
A missing error check after calloc in libarchive causes a NULL pointer dereference, potentially leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-36227?
CVE-2022-36227 is a critical vulnerability in Debian Debian Linux, published on 22 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
Weakness: CWE-476
Which versions are affected by CVE-2022-36227?
It affects 4 products.
Linux distribution packages (40)
bsdtar AlmaLinux:8 | All versions | 3.3.3-5.el8 |
libarchive AlmaLinux:8 | All versions | 3.3.3-5.el8 |
libarchive-devel AlmaLinux:8 | All versions | 3.3.3-5.el8 |
bsdtar AlmaLinux:9 | All versions | 3.5.3-4.el9 |
libarchive AlmaLinux:9 | All versions | 3.5.3-4.el9 |
libarchive-devel AlmaLinux:9 | All versions | 3.5.3-4.el9 |
bsdcat-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:3.3.3-5.el8 |
bsdcpio-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:3.3.3-5.el8 |
bsdtar Red Hat:enterprise_linux:8::baseos | All versions | 0:3.3.3-5.el8 |
bsdtar-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:3.3.3-5.el8 |
libarchive Red Hat:enterprise_linux:8::baseos | All versions | 0:3.3.3-5.el8 |
libarchive-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:3.3.3-5.el8 |
libarchive-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:3.3.3-5.el8 |
bsdcat-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:3.3.3-5.el8 |
bsdcpio-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:3.3.3-5.el8 |
bsdtar-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:3.3.3-5.el8 |
libarchive-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:3.3.3-5.el8 |
libarchive-debugsource Red Hat:enterprise_linux:8::crb | All versions | 0:3.3.3-5.el8 |
libarchive-devel Red Hat:enterprise_linux:8::crb | All versions | 0:3.3.3-5.el8 |
bsdcat-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:3.5.3-4.el9 |
bsdcpio-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:3.5.3-4.el9 |
bsdtar Red Hat:enterprise_linux:9::appstream | All versions | 0:3.5.3-4.el9 |
bsdtar-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:3.5.3-4.el9 |
libarchive-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:3.5.3-4.el9 |
libarchive-debugsource Red Hat:enterprise_linux:9::appstream | All versions | 0:3.5.3-4.el9 |
bsdcat-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:3.5.3-4.el9 |
bsdcpio-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:3.5.3-4.el9 |
bsdtar-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:3.5.3-4.el9 |
libarchive Red Hat:enterprise_linux:9::baseos | All versions | 0:3.5.3-4.el9 |
libarchive-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:3.5.3-4.el9 |
libarchive-debugsource Red Hat:enterprise_linux:9::baseos | All versions | 0:3.5.3-4.el9 |
bsdcat-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 0:3.5.3-4.el9 |
bsdcpio-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 0:3.5.3-4.el9 |
bsdtar-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 0:3.5.3-4.el9 |
libarchive-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 0:3.5.3-4.el9 |
libarchive-debugsource Red Hat:enterprise_linux:9::crb | All versions | 0:3.5.3-4.el9 |
libarchive-devel Red Hat:enterprise_linux:9::crb | All versions | 0:3.5.3-4.el9 |
bsdcat-debuginfo Red Hat:rhel_eus:8.6::baseos | All versions | 0:3.3.3-4.el8_6 |
bsdcpio-debuginfo Red Hat:rhel_eus:8.6::baseos | All versions | 0:3.3.3-4.el8_6 |
bsdtar Red Hat:rhel_eus:8.6::baseos | All versions | 0:3.3.3-4.el8_6 |
Products include Debian Debian Linux, Fedoraproject Fedora, Libarchive Libarchive, Splunk Universal Forwarder.
How do I fix CVE-2022-36227?
Upgrade to a fixed version.
Is CVE-2022-36227 being exploited?
There is no known exploitation of CVE-2022-36227 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2022-36227, ALSA-2023:2532, ALSA-2023:3018, AZL-11470, DEBIAN-CVE-2022-36227, DLA-3294-1 and 15 more.