The zlib compression library is vulnerable to a denial-of-service condition

Overview Un-handled error conditions in the zlib compression library may allow an attacker to cause a denial-of-service condition. Description There is a vulnerability in the error handling mechanisms of the decompression functions in the zlib compression library. The decompression functions...

Debian DSA-122-1 : zlib - malloc error (double free)

The compression library zlib has a flaw in which it attempts to free memory more than once under certain conditions. This can possibly be exploited to run arbitrary code in a program that includes zlib. If a network application running as root is linked to zlib, this could potentially lead to a...

CVE-2004-0797

The error handling in the 1 inflate and 2 inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service application crash...

CVE-2004-0797

The error handling in the 1 inflate and 2 inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service application crash...

CVE-2004-0797

The CVE-2004-0797 entry concerns the ZLib compression library 1.2.x, where the error handling in the inflate and inflateBack functions can allow local users to trigger a denial of service (application crash). The connected OSV records reuse the same description and do not provide additional explo...

Mandrake Linux Security Advisory : zlib (MDKSA-2004:090)

Due to a Debian bug report, a Denial of Service vulnerability was discovered in the zlib compression library versions 1.2.x, in the inflate and inflateBack functions. Older versions of zlib are not affected. Once the updated packages have been installed, all programs linked against zlib must be...

SUSE-SA:2004:029: zlib

The remote host is missing the patch for the advisory SUSE-SA:2004:029 zlib. zlib is a widely used data compression library. Programs linked against it include most desktop applications as well as servers such as Apache and OpenSSH. The 'inflate' function of zlib handles certain input data...

CVE-2003-0107

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code...

CVE-2003-0107

The CVE-2003-0107 issue is a buffer overflow in zlib 1.1.4’s gzprintf() when compiled without vsnprintf or when long inputs are truncated. Affected: zlib (1.1.4 and earlier). Impact per sources: denial of service and potential remote code execution. Public advisories (e.g., Red Hat RHSA-2003:081 ...

CVE-2003-0107

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code...

zlib DoS

No description provided...

[OpenPKG-SA-2004.038] OpenPKG Security Advisory (zlib)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2004.038 25-Aug-2004 Package: zlib Vulnerability: denial of service OpenPKG Specific:...

GLSA-200408-26 : zlib: Denial of service vulnerability

The remote host is affected by the vulnerability described in GLSA-200408-26 zlib: Denial of service vulnerability zlib contains a bug in the handling of errors in the 'inflate' and 'inflateBack' functions. Impact : An attacker could exploit this vulnerability to launch a Denial of Service attack...

zlib: Denial of service vulnerability

Background zlib is a general-purpose data-compression library. Description zlib contains a bug in the handling of errors in the "inflate" and "inflateBack" functions. Impact An attacker could exploit this vulnerability to launch a Denial of Service attack on any application using the zlib library...

Mandrake Linux Security Advisory : zlib (MDKSA-2002:022)

Matthias Clasen found a security issue in zlib that, when provided with certain input, causes zlib to free an area of memory twice. This 'double free' bug can be used to crash any programs that take untrusted compressed input, such as web browsers, email clients, image viewing software, etc. This...

Mandrake Linux Security Advisory : zlib-pkgs (MDKSA-2002:023-1)

Matthias Clasen found a security issue in zlib that, when provided with certain input, causes zlib to free an area of memory twice. This 'double free' bug can be used to crash any programs that take untrusted compressed input, such as web browsers, email clients, image viewing software, etc. This...

Mandrake Linux Security Advisory : kernel (MDKSA-2002:041)

A problem was discovered in the CIPE VPN tunnel implementation in the Linux kernel where a malformed packet could cause a crash. Andrew Griffiths discovered a vulnerability that allows remote machines to read random memory by utilizing a bug in the ICMP implementation of Linux kernels. This only...

Mandrake Linux Security Advisory : zlib (MDKSA-2003:033)

Richard Kettlewell discovered a buffer overflow vulnerability in the zlib library's gzprintf function. This can be used by attackers to cause a denial of service or possibly even the execution of arbitrary code. Our thanks to the OpenPKG team for providing a patch which adds the necessary configu...

Solaris 9 (sparc) : 115754-02

SunOS 5.9: zlib security Patch. Date this patch was last updated by Sun : Oct/21/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (x86) : 115755-02

SunOS 5.9x86: zlib security Patch. Date this patch was last updated by Sun : Oct/21/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...