Perl Compress::Raw modules: Denial of service

Background Compress::Raw::Zlib and Compress::Raw::Bzip2 are Perl low-level interfaces to the zlib and bzip2 compression libraries. Description Leo Bergolth reported an off-by-one error in the inflate function in Zlib.xs of Compress::Raw::Zlib, possibly leading to a heap-based buffer overflow...

Mandrake Security Advisory MDVSA-2009:174 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:174. OpenVAS Vulnerability Test $Id: mdksa2009174.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:174 perl-Compress-Raw-Zlib Authors: Thomas Reinke...

Mandrake Security Advisory MDVSA-2009:174 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:174. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora Core 10 FEDORA-2009-7680 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-7680. OpenVAS Vulnerability Test $Id: fcore20097680.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7680 perl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:157 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:157. OpenVAS Vulnerability Test $Id: mdksa2009157.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:157 perl-Compress-Raw-Zlib Authors: Thomas Reinke...

Mandrake Security Advisory MDVSA-2009:157 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:157. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora Core 10 FEDORA-2009-7680 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-7680. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Mandriva Linux Security Advisory : perl-Compress-Raw-Zlib (MDVSA-2009:157-1)

A vulnerability has been found and corrected in perl-Compress-Raw-Zlib : Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of servi...

Fedora 10 : perl-5.10.0-73.fc10 (2009-7680)

This security update fixes an off-by-one overflow in Compress::Raw::Zlib CVE-2009-1391 Moreover, it contains a subtle change to the configuration that does not affect the Perl interpreter itself, but fixes the propagation of the chosen options to the modules. For example, a rebuild of perl-Wx...

Apache DoS

Data exceeding Content-length value causes CPU exhaustion. moddeflate doesn't break file compress operation if client disconnects...

USN-794-1: Perl vulnerability

It was discovered that the Compress::Raw::Zlib Perl module incorrectly handled certain zlib compressed streams. If a user or automated system were tricked into processing a specially crafted compressed stream or file, a remote attacker could crash the application, leading to a denial of service...

openSUSE 10 Security Update : perl-Compress-Raw-Zlib (perl-Compress-Raw-Zlib-6300)

A Buffer overflow in the Compress::Raw::Zlib perl module has been fixed. CVE-2009-1391 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-Compress-Raw-Zlib-6300. The text description of this...

Fedora Core 11 FEDORA-2009-6033 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-6033. OpenVAS Vulnerability Test $Id: fcore20096033.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6033 perl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 11 FEDORA-2009-6033 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-6033. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Heap overflow

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

CVE-2009-1391

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

CVE-2009-1391

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

CVE-2009-1391

CVE-2009-1391 affects Perl’s Compress-Raw-Zlib (base module in perl-Compress-Raw-Zlib) and related Compress-Raw-Bzip2, via an off-by-one in the inflate function (Zlib.xs) that can trigger a heap-based buffer overflow, causing DoS (hang/crash). The issue impacted Perl-based products using these mo...

Fedora 11 : perl-5.10.0-69.fc11 (2009-6033)

Off-by-one overflow in Compress::Raw::Zlib CVE-2009-1391 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

'Compress::Raw::Zlib' Perl模块远程代码执行漏洞

Bugraq ID: 35307 CVE ID：CVE-2009-1391 CNCVE ID：CNCVE-20091391 Compress::Raw::Zlib是一款Zlib压缩库提供perl低级接口的模块。 Compress::Raw::Zlib inflate存在缓冲区溢出，远程攻击者可以利用漏洞使应用程序崩溃或以应用程序权限执行任意指令。 Zlib.xs中的"inflate"函数存在单字节错误，当处理特殊构建的压缩数据时存在堆缓冲区溢出，可导致perl进程关起或崩溃。 Compress::Raw::Zlib 2.015 Compress::Raw::Zlib 2.014 升级程序...