PT-2022-15027 · Unknown · Bytecode Viewer

Ready-Research · Published 2022-01-12 · Updated 2022-01-19 · CVE-2022-21675

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bytecode Viewer (BCV) versions prior to 2.11.0

Description The issue concerns Arbitrary File Write via Archive Extraction, also known as "Zip Slip". This is exploited using a specially crafted archive that holds directory traversal filenames, such as ../../evil.exe. The vulnerability can affect numerous archive formats, including zip, jar, tar, war, cpio, apk, rar, and 7z. An attacker can overwrite executable files, achieving remote command execution on the victim's machine by either invoking them remotely or waiting for the system or user to call them. In a web application context, a web shell could be placed within the application directory to achieve code execution. The impact allows an attacker to create or overwrite existing files on the filesystem.

Recommendations For versions prior to 2.11.0, upgrade to BCV v2.11.0 to receive a patch. There are no recommended workarounds aside from upgrading.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-21675

GHSA-3WQ9-J4FC-4WMC

Affected Products

Bytecode Viewer

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21675.json · Exploit
• https://github.com/Konloch/bytecode-viewer/commit/1ec02658fe6858162f5e6a24f97928de6696c5cb · Patch
• https://github.com/Konloch/bytecode-viewer/security/advisories/GHSA-3wq9-j4fc-4wmc · Patch
• https://github.com/Konloch/bytecode-viewer/commit/c968e94b2c93da434a4ecfac6d08eda162d615d0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-21675 · Security Note
• https://osv.dev/vulnerability/CVE-2022-21675 · Vendor Advisory
• https://github.com/Konloch/bytecode-viewer/releases/tag/v2.11.0 · Note
• https://t.me/cvenotify/25663 · Telegram Post
• https://t.me/cibsecurity/35361 · Telegram Post