Azure Linux 3.0 Security Update: fltk / teckit (CVE-2023-6992)

The version of fltk / teckit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6992 advisory. - Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting th...

CVE-2023-6992 affecting package teckit for versions less than 2.5.12-4

CVE-2023-6992 affecting package teckit for versions less than 2.5.12-4. An upgraded version of the package is available that resolves this issue...

CVE-2023-6992 affecting package fltk for versions less than 1.3.8-1

CVE-2023-6992 affecting package fltk for versions less than 1.3.8-1. An upgraded version of the package is available that resolves this issue...

AZL-45198 CVE-2023-6992 affecting package teckit for versions less than 2.5.12-4

Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...

CVE-2023-6992

CVE-2023-6992 affects Cloudflare’s zlib; memory corruption in the deflate.c implementation from improper input validation can allow a local attacker to cause a denial of service during compression with a crafted file. Patch is in commit 8352d10 (Cloudflare zlib) and upstream appears unaffected; N...