| Package | Affected versions | Patched versions |
|---|---|---|
| splunk | ≥ 8.1.0, < 8.1.11≥ 8.2.0, < 8.2.7.1 | 8.1.118.2.7.1 |
| universal forwarder | ≥ 8.1.0, < 8.1.11≥ 8.2.0, < 8.2.7.1 | 8.1.118.2.7.1 |
In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result in a crash of the application. Attempts to restart the application would result in a crash and would require manually removing the malformed file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free