CVE-2022-37439

Published: Aug 16, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result in a crash of the application. Attempts to restart the application would result in a crash and would require manually removing the malformed file.

Affected (4)

Products: Splunk: Splunk, Universal Forwarder

Splunk

2 products

Splunk

Universal Forwarder

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	From 8.1.0 to 8.1.11
Splunk Splunk	From 8.2.0 to 8.2.7.1
Splunk Universal Forwarder	From 8.1.0 to 8.1.11
Splunk Universal Forwarder	From 8.2.0 to 8.2.7.1