Lucene search

CVE-2022-37434

🗓️ 05 Aug 2022 07:07:15Reported by [email protected]Type

zlib 1.2.12 heap-based buffer overflow in inflate.

Reporter	Title	Published	Views	Family All 199
Tenable Nessus	Amazon Linux 2022 : zlib (ALAS2022-2022-252)	10 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : zlib (ALAS-2022-1650)	10 Dec 202200:00	–	nessus
Tenable Nessus	Oracle TimesTen < 11.2.2.8.65, 22.x < 22.1.1.5.0 Buffer Overflow (January 2023 CPU)	9 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.1 : zlib (EulerOS-SA-2022-2950)	28 Dec 202200:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : rsync vulnerability (USN-5573-1)	19 Aug 202200:00	–	nessus
Tenable Nessus	AIX 7.3 TL 0 : zlib (IJ46030)	26 Jul 202300:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : zlib (SUSE-SU-2022:2846-1)	20 Aug 202200:00	–	nessus
Tenable Nessus	CentOS 7 : zlib (RHSA-2023:1095)	9 Mar 202300:00	–	nessus
Tenable Nessus	Debian DSA-5218-1 : zlib - security update	26 Aug 202200:00	–	nessus
Tenable Nessus	Rocky Linux 8 : zlib (RLSA-2022:7106)	17 Nov 202200:00	–	nessus

Nvd

Node

zlib zlibRange≤1.2.12

Node

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

fedoraproject fedoraMatch37

Node

debian debian_linuxMatch10.0

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp hciMatch-

netapp management_services_for_element_softwareMatch-

netapp oncommand_workflow_automationMatch-

netapp ontap_select_deploy_administration_utilityMatch-

netapp storagegridMatch-

netapp hci_compute_nodeMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

apple ipadosRange<15.7.1

apple iphone_osRange<15.7.1

apple iphone_osRange16.0–16.1

apple macosRange11.0–11.7.1

apple macosRange12.0.0–12.6.1

apple watchosRange<9.1

Node

stormshield stormshield_network_securityRange3.7.31–3.7.34

stormshield stormshield_network_securityRange3.11.0–3.11.22

stormshield stormshield_network_securityRange4.3.0–4.3.16

stormshield stormshield_network_securityRange4.6.0–4.6.3

Source	Link
seclists	www.seclists.org/fulldisclosure/2022/Oct/37
seclists	www.seclists.org/fulldisclosure/2022/Oct/38
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/
lists	www.lists.debian.org/debian-lts-announce/2022/09/msg00012.html
github	www.github.com/curl/curl/issues/9271
debian	www.debian.org/security/2022/dsa-5218
github	www.github.com/ivd38/zlib_overflow
security	www.security.netapp.com/advisory/ntap-20230427-0007/
support	www.support.apple.com/kb/HT213488

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Aug 2022 07:15Current

CVSS39.8

EPSS0.003

CWE-787