225 matches found
USN-5355-1 zlib vulnerability
Danilo Ramos discovered that zlib incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code...
Vulnerability fixed in zlib
A vulnerability has been fixed in Zlib. The vulnerability allows a malicious person potentially able to corrupt memory during compression of specially prepared data. As a result of this, the malicious party could establish a denial-of-service effect a Denial-of-Service in the application using...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via memory corruption when deflating i.e., when compressing if the input has many distant matches. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its...
AZL-9143 CVE-2018-25032 affecting package zlib for versions less than 1.2.12-1
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
AZL-26135 CVE-2018-25032 affecting package boost for versions less than 1.76.0-3
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
DEBIAN-CVE-2018-25032
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
AZL-43678 CVE-2018-25032 affecting package gpsbabel 1.8.0-4
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
AZL-45231 CVE-2018-25032 affecting package fltk 1.3.8-1
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
ALPINE-CVE-2018-25032
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
The vulnerability of the zlib compression library in the “Avora” operating system allows a hacker to cause a service failure or have an unpredictable impact.
The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...
The vulnerability of the zlib compression library in the “Avora” operating system, related to integer overflows, allows attackers to cause service failures or have unpredictable effects.
The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...
USN-4246-1 zlib vulnerabilities
It was discovered that zlib incorrectly handled pointer arithmetic. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-9840, CVE-2016-9841 It was discovered that zlib incorrectly handled vectors involving left...
Security Bulletin: Vulnerabilities in libxml2 and zlib affect IBM RackSwitch Products
Summary IBM RackSwitch Products listed below have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details Summary IBM RackSwitch Products listed below have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details: CVEID: CVE-2016-4658...
Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience
Summary The IBM Tealeaf Consumer Experience portal exposes some of its operational state that could be accidentally captured and exposed by network infrastructure components. Vulnerability in IBM Tealeaf Customer Experience can cause host header injection attack that could lead to HTTP cache...
PT-2022-2042
Name of the Vulnerable Software and Affected Versions zlib versions 1.2.11 through 1.2.12 Description The issue is related to memory corruption when deflating, i.e., when compressing, if the input has many distant matches. This can lead to a buffer overflow in memory. An attacker could potentiall...
zlib: Out-of-bound pointer arithmetic in inftrees.c
A vulnerability was discovered in the inftrees.c file of zlib. Pointer arithmetic operations violate the C standard by subtracting an offset from an array pointer before its allocated memory, leading to undefined behavior...
zlib: Big-endian out-of-bounds pointer
The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation...
zlib: Undefined left shift of negative number
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers...