Lucene search
AlmaLinuxALSA-2022:7314HistoryNov 02, 2022 - 12:00 a.m.
Moderate: zlib security update
2022-11-0200:00:00
errata.almalinux.org
12
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.2%
The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.
Security Fix(es):
- zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | aarch64 | zlib-devel | < 1.2.11-32.el9_0 | zlib-devel-1.2.11-32.el9_0.aarch64.rpm |
| almalinux | 9 | i686 | zlib-devel | < 1.2.11-32.el9_0 | zlib-devel-1.2.11-32.el9_0.i686.rpm |
| almalinux | 9 | s390x | zlib-devel | < 1.2.11-32.el9_0 | zlib-devel-1.2.11-32.el9_0.s390x.rpm |
| almalinux | 9 | ppc64le | zlib-devel | < 1.2.11-32.el9_0 | zlib-devel-1.2.11-32.el9_0.ppc64le.rpm |
| almalinux | 9 | x86_64 | zlib | < 1.2.11-32.el9_0 | zlib-1.2.11-32.el9_0.x86_64.rpm |
| almalinux | 9 | ppc64le | zlib | < 1.2.11-32.el9_0 | zlib-1.2.11-32.el9_0.ppc64le.rpm |
| almalinux | 9 | aarch64 | zlib | < 1.2.11-32.el9_0 | zlib-1.2.11-32.el9_0.aarch64.rpm |
| almalinux | 9 | s390x | zlib | < 1.2.11-32.el9_0 | zlib-1.2.11-32.el9_0.s390x.rpm |
| almalinux | 9 | ppc64le | zlib-static | < 1.2.11-32.el9_0 | zlib-static-1.2.11-32.el9_0.ppc64le.rpm |
| almalinux | 9 | aarch64 | zlib-static | < 1.2.11-32.el9_0 | zlib-static-1.2.11-32.el9_0.aarch64.rpm |
Related
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : rsync vulnerability (USN-5573-1)
2022-08-19 00:00:00
SUSE SLES12 Security Update : zlib (SUSE-SU-2022:2846-1)
2022-08-20 00:00:00
EulerOS Virtualization 2.10.1 : zlib (EulerOS-SA-2022-2950)
2022-12-28 00:00:00
oraclelinux
oraclelinux
zlib security update
2022-11-02 00:00:00
zlib security update
2022-11-09 00:00:00
zlib security update
2022-10-26 00:00:00
almalinux
almalinux
Moderate: rsync security and enhancement update
2022-11-08 00:00:00
Moderate: rsync security and bug fix update
2022-11-15 00:00:00
Moderate: zlib security update
2022-10-25 00:00:00
cloudlinux
cloudlinux
Fixed CVE-2022-37434 in zlib
2022-08-17 18:47:33
Fixed CVE-2022-37434 in rsync
2022-08-25 15:56:39
veracode
veracode
Denial Of Service (DoS)
2022-08-09 02:04:05
cloudfoundry
cloudfoundry
USN-5570-1: zlib vulnerability | Cloud Foundry
2023-01-19 00:00:00
USN-5573-1: rsync vulnerability | Cloud Foundry
2023-01-19 00:00:00
USN-5573-1: rsync vulnerability | Cloud Foundry
2022-08-25 00:00:00
rocky
rocky
zlib security update
2022-10-25 07:22:56
zlib security update
2022-11-02 13:50:56
rsync security and enhancement update
2022-11-08 06:29:11
debian
debian
[SECURITY] [DSA 5218-1] zlib security update
2022-08-25 19:51:59
[SECURITY] [DLA 3103-1] zlib security update
2022-09-12 09:00:53
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:2846-1)
2022-08-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2847-1)
2022-08-19 00:00:00
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2022-2787)
2022-11-14 00:00:00
f5
f5
K67213091 : Zlib vulnerability CVE-2022-37434
2022-10-21 00:00:00
osv
osv
Moderate: rsync security and enhancement update
2022-11-08 06:29:11
CVE-2022-37434
2022-08-05 07:15:07
Moderate: rsync security and bug fix update
2022-11-15 06:20:39
ibm
ibm
Security Bulletin: IBM Planning Analytics Workspace has addressed a vulnerability in GNU zlib (CVE-2022-37434)
2023-06-07 21:00:25
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Zlib
2022-09-30 10:20:36
Exploit for Out-of-bounds Write in Zlib
2022-09-14 07:28:23
Exploit for Out-of-bounds Write in Zlib
2024-02-02 14:25:28
debiancve
debiancve
CVE-2022-37434
2022-08-05 07:15:00
ubuntu
ubuntu
zlib vulnerability
2022-10-17 00:00:00
zlib vulnerability
2022-08-17 00:00:00
rsync vulnerability
2022-08-18 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:13.zlib
2022-08-30 00:00:00
redhat
redhat
(RHSA-2022:7106) Moderate: zlib security update
2022-10-25 07:22:56
(RHSA-2022:8291) Moderate: rsync security and bug fix update
2022-11-15 06:20:39
(RHSA-2023:1095) Moderate: zlib security update
2023-03-07 08:56:16
amazon
amazon
freebsd
freebsd
FreeBSD -- zlib heap buffer overflow
2022-08-30 00:00:00
centos
centos
minizip, zlib security update
2023-03-08 16:30:28
qt
qt
Security advisory: zlib in Qt
2022-09-12 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2131
2023-03-14 14:13:27
wolfi
wolfi
CVE-2022-37434 vulnerabilities
2024-04-29 09:06:10
fedora
fedora
[SECURITY] Fedora 35 Update: zlib-1.2.11-32.fc35
2022-09-16 01:46:40
[SECURITY] Fedora 36 Update: zlib-1.2.11-33.fc36
2022-09-02 09:55:06
[SECURITY] Fedora 37 Update: zlib-1.2.12-5.fc37
2022-09-14 00:23:02
cbl_mariner
cbl_mariner
CVE-2022-37434 affecting package zlib 1.2.12-1
2022-08-24 22:05:05
CVE-2022-37434 affecting package zlib 1.2.12-1
2022-09-13 22:36:39
suse
suse
Security update for zlib (important)
2022-08-31 00:00:00
Security update for zlib (important)
2022-09-01 00:00:00
aix
aix
AIX is vulnerable to denial of service due to zlib and zlibNX
2023-07-25 11:05:17
redhatcve
redhatcve
CVE-2022-37434
2022-08-09 06:36:51
mageia
mageia
Updated zlib packages fix security vulnerability
2022-09-16 22:39:55
alpinelinux
alpinelinux
CVE-2022-37434
2022-08-05 07:15:00
redos
redos
ROS-20221207-01
2022-12-07 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0236
2022-08-23 00:00:00
slackware
slackware
[slackware-security] zlib
2022-10-15 20:38:53
cgr
cgr
CVE-2022-37434 vulnerabilities
2024-04-29 09:06:10
ubuntucve
ubuntucve
CVE-2022-37434
2022-08-05 00:00:00
prion
prion
Heap overflow
2022-08-05 07:15:00
cve
cve
CVE-2022-37434
2022-08-05 07:15:00
gentoo
gentoo
zlib: Multiple vulnerabilities
2022-10-31 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.2%
Related for ALSA-2022:7314