CVE-2005-1849

CVE-2005-1849 affects zlib 1.2.2, where inftrees.h can be exploited by a malicious file to cause a denial of service (application crash) via a large dynamic tree. The vulnerability is exploitable remotely and does not require authentication. The initial description confirms the crash is caused by...

DEBIAN-CVE-2005-1849

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...

CVE-2005-1849

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...

Fedora Core 4 : zlib-1.2.2.2-5.fc4 (2005-626)

Fri Jul 22 2005 Ivana Varekova 1.2.2.2-5.fc4 - fix bug 163038 - CVE-2005-1849 - zlib buffer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora Core 3 : zlib-1.2.1.2-3.fc3 (2005-625)

Fri Jul 22 2005 Ivana Varekova 1.2.1.2-3.fc3 - fix bug 163038 - CVE-2005-1849 - zlib overflow problem Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

USN-151-2: zlib vulnerabilities

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Most applications use the shared library provided by the "zlib1g" package; however, some packages contain copies of t...

zlib

New zlib packages are available for Slackware 10.0, 10.1, and -current to fix an additional crash issue. zlib 1.1.x is not affected. Here are the details from the Slackware 10.1 ChangeLog: patches/packages/zlib-1.2.3-i486-1.tgz: Upgraded to zlib-1.2.3. This fixes an additional crash not fixed by...

zlib: Buffer overflow

Background zlib is a widely used free and patent unencumbered data compression library. Description zlib improperly handles invalid data streams which could lead to a buffer overflow. Impact By creating a specially crafted compressed data stream, attackers can overwrite data structures for...

GLSA-200507-19 : zlib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200507-19 zlib: Buffer overflow zlib improperly handles invalid data streams which could lead to a buffer overflow. Impact : By creating a specially crafted compressed data stream, attackers can overwrite data structures for...

RHEL 4 : zlib (RHSA-2005:584)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:584 advisory. Zlib is a general-purpose lossless data compression library that is used by many different programs. A previous zlib update, RHSA-2005:569 CAN-2005-20...

Multiple MySQL database management system vulnerabilities

Multiple DoS, vulnerable zlib version is used...

zlib security update

CentOS Errata and Security Advisory CESA-2005:584 Updated zlib packages that fix a buffer overflow are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Zlib is a general-purpose lossless data...

Important: Red Hat Security Advisory: zlib security update

Updated zlib packages that fix a buffer overflow are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Zlib is a general-purpose lossless data compression library that is used by many different...

zlib DoS

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...

[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA 763-1 [email protected] http://www.debian.org/security/ Michael Stone July 20, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA 763-1 [email protected] http://www.debian.org/security/ Michael Stone July 20, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Debian DSA-763-1 : zlib - remote DoS

Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file. This problem does not affect the old stable distribution woody. %NASLMINLEVEL 70300 ...

DSA-763-1 zlib - buffer overflow

Bulletin has no description...

SUSE-SA:2005:039: zlib

The remote host is missing the patch for the advisory SUSE-SA:2005:039 zlib. A denial of service condition was fixed in the zlib library. Any program using zlib to decompress data can be crashed by a specially handcrafted invalid data stream. This includes web browsers or email programs able to...

Slackware 10.0 / 10.1 / current : zlib DoS (SSA:2005-189-01)

New zlib packages are available for Slackware 10.0, 10.1, and -current to fix a denial of service security issue. zlib 1.1.x is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory...