CPANSA-Archive-Unzip-Burst-2022-4976: Archive-Unzip-Burst vulnerability
| Publisher | giterlizzi | Document category | csaf_security_advisory |
|---|---|---|---|
| Initial release date | 2025-06-12T00:00:00 | Engine | CSAF Perl Toolkit 0.26 |
| Current release date | 2025-06-12T00:00:00 | Build Date | |
| Current version | 1 | Status | final |
| CVSS v3.1 Base Score | 9.8 | Severity | |
| Original language | Language | en | |
| Also referred to | |||
Vulnerability Description
Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities. The bundled library is affected by CVE-2014-8139, CVE-2014-8140 and CVE-2014-8141.
Vulnerabilities
CVE-2022-4976
Vulnerability DescriptionArchive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities.
The bundled library is affected by CVE-2014-8139, CVE-2014-8140 and CVE-2014-8141.
Product status
Known affected
| Product | Score | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Archive-Unzip-Burst greater than or equal 0.01 |
|
giterlizzi
Namespace: https://github.com/giterlizzi/
gdt@cpan.org
References
- CPANSA-Archive-Unzip-Burst-2022-4976 JSON self
https://raw.githubusercontent.com/giterlizzi/perl-CPANSA-CSAF/develop/csaf/white/2025/cpansa-archive-unzip-burst-2022-4976.json - https://rt.cpan.org/Public/Bug/Display.html?id=143547 external
https://rt.cpan.org/Public/Bug/Display.html?id=143547 - CVE-2022-4976 (NVD) external
https://nvd.nist.gov/vuln/detail/CVE-2022-4976
Revision history
| Version | Date of the revision | Summary of the revision |
|---|---|---|
| 1 | Thu Jun 12 00:00:00 2025 | First release |
Sharing rules
TLP:WHITE
For the TLP version see: https://www.first.org/tlp/