Lucene search
+L

225 matches found

OSV
OSV
added 2022/03/30 2:24 p.m.2 views

USN-5355-1 zlib vulnerability

Danilo Ramos discovered that zlib incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.5CVSS6.8AI score0.52063EPSS
SaveExploits1References2
NCSC
NCSC
added 2022/03/29 12:0 a.m.3 views

Vulnerability fixed in zlib

A vulnerability has been fixed in Zlib. The vulnerability allows a malicious person potentially able to corrupt memory during compression of specially prepared data. As a result of this, the malicious party could establish a denial-of-service effect a Denial-of-Service in the application using...

7.5CVSS7AI score0.52063EPSS
SaveExploits1
Snyk
Snyk
added 2022/03/25 12:46 p.m.3 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via memory corruption when deflating i.e., when compressing if the input has many distant matches. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its...

8.2CVSS7.2AI score0.52063EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/25 9:15 a.m.4 views

AZL-9143 CVE-2018-25032 affecting package zlib for versions less than 1.2.12-1

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS6.7AI score0.52063EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/25 9:15 a.m.12 views

AZL-26135 CVE-2018-25032 affecting package boost for versions less than 1.76.0-3

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS6.7AI score0.52063EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/25 9:15 a.m.1 views

DEBIAN-CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS6.7AI score0.52063EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/25 9:15 a.m.19 views

AZL-43678 CVE-2018-25032 affecting package gpsbabel 1.8.0-4

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS6.7AI score0.52063EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/25 9:15 a.m.6 views

AZL-45231 CVE-2018-25032 affecting package fltk 1.3.8-1

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS6.9AI score0.52063EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/25 9:15 a.m.3 views

ALPINE-CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS7.1AI score0.52063EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.14 views

The vulnerability of the zlib compression library in the “Avora” operating system allows a hacker to cause a service failure or have an unpredictable impact.

The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...

7.3CVSS5.5AI score
SaveExploits0Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.20 views

The vulnerability of the zlib compression library in the “Avora” operating system, related to integer overflows, allows attackers to cause service failures or have unpredictable effects.

The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...

6.2CVSS5.5AI score
SaveExploits0References2Affected Software2
OSV
OSV
added 2020/01/22 7:0 p.m.11 views

USN-4246-1 zlib vulnerabilities

It was discovered that zlib incorrectly handled pointer arithmetic. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-9840, CVE-2016-9841 It was discovered that zlib incorrectly handled vectors involving left...

9.8CVSS7AI score0.0755EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2019/01/31 2:25 a.m.23 views

Security Bulletin: Vulnerabilities in libxml2 and zlib affect IBM RackSwitch Products

Summary IBM RackSwitch Products listed below have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details Summary IBM RackSwitch Products listed below have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details: CVEID: CVE-2016-4658...

10CVSS1.1AI score0.08628EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 8:8 p.m.50 views

Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience

Summary The IBM Tealeaf Consumer Experience portal exposes some of its operational state that could be accidentally captured and exposed by network infrastructure components. Vulnerability in IBM Tealeaf Customer Experience can cause host header injection attack that could lead to HTTP cache...

9.8CVSS1.3AI score0.39657EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
added 2018/04/20 12:0 a.m.15 views

PT-2022-2042

Name of the Vulnerable Software and Affected Versions zlib versions 1.2.11 through 1.2.12 Description The issue is related to memory corruption when deflating, i.e., when compressing, if the input has many distant matches. This can lead to a buffer overflow in memory. An attacker could potentiall...

10CVSS9.2AI score0.6773EPSS
SaveExploits122References686
RedHat Linux
RedHat Linux
added 2017/12/13 4:48 p.m.14 views

zlib: Out-of-bound pointer arithmetic in inftrees.c

A vulnerability was discovered in the inftrees.c file of zlib. Pointer arithmetic operations violate the C standard by subtracting an offset from an array pointer before its allocated memory, leading to undefined behavior...

8.8CVSS7.2AI score0.04793EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2017/12/13 4:48 p.m.12 views

zlib: Big-endian out-of-bounds pointer

The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation...

9.8CVSS7.4AI score0.05766EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2017/10/24 12:14 p.m.48 views

zlib: Undefined left shift of negative number

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers...

8.8CVSS7.4AI score0.05204EPSS
SaveExploits0References6
NVD
NVD
added 2017/05/23 4:29 a.m.29 views

CVE-2016-9840

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...

8.8CVSS9.5AI score0.04793EPSS
SaveExploits0References31
NVD
NVD
added 2017/05/23 4:29 a.m.24 views

CVE-2016-9842

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers...

8.8CVSS9.5AI score0.05204EPSS
SaveExploits0References31
Rows per page
Query Builder