Paper/Archive/CVE-2022-4976

CVE-2022-4976

ETJ Archive::Unzip::Burst — Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities

EPSS 0.4%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 35.1.351 × 207.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities. The bundled library is affected by CVE-2014-8139, CVE-2014-8140 and CVE-2014-8141.

Affected

ProductAffectedFixed inSource

Archive::Unzip::Burst0.01 – 0.09–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refrt.cpan.org/Public/Bug/Display.html?id=143547