PT-2025-25274 · Info Zip+1 · Info-Zip+1

Published 2025-06-12 · Updated 2025-06-17 · CVE-2022-4976

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Archive::Unzip::Burst versions 0.01 through 0.09

Description The issue concerns a bundled InfoZip library in Archive::Unzip::Burst for Perl, which is affected by several vulnerabilities.

Recommendations For Archive::Unzip::Burst versions 0.01 through 0.09, consider updating to a version that does not bundle the vulnerable InfoZip library, or apply any available patches to the library itself. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1395

Related Identifiers

CVE-2022-4976

Affected Products

Archive::Unzip::Burst

Info-Zip

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-4976 · Security Note
• https://t.me/cvenotify/125453 · Telegram Post
• https://t.me/cvetracker/26054 · Telegram Post
• https://rt.cpan.org/Public/Bug/Display.html?id=143547 · Note
• https://twitter.com/CVEnew/status/1932968553143042191 · Twitter Post
• https://twitter.com/cracbot/status/1934929049840963941 · Twitter Post