EulerOS 2.0 SP8 : zlib (EulerOS-SA-2022-2485)

According to the versions of the zlib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only...

Updated zlib packages fix security vulnerability

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

OESA-2022-1892 sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fixes: zlib through 1.2.12 has a heap-based buffer over-read or buff...

FreeBSD : FreeBSD -- zlib heap buffer overflow (a1323a76-28f1-11ed-a72a-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a1323a76-28f1-11ed-a72a-002590c1f29c advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via ...

Debian DSA-5218-1 : zlib - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5218 advisory. Evgeny Legerov reported a heap-based buffer overflow vulnerability in the inflate operation in zlib, which could result in denial of service or potentially the execution o...

CLSA-2022-1661443990 Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

CLSA-2022-1661443683 Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

CLSA-2022-1661442999 Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

CLSA-2022-1661442133 Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

OESA-2022-1843 zlib security update

Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms. Security Fixes: zlib through 1.2.12 has a heap-based buffer over-read or buffer...

OESA-2022-1853 rsync security update

Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...

SUSE-SU-2022:2846-1 Security update for zlib

This update for zlib fixes the following issues: - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field bsc1202175...

CLSA-2022-1660762053 Fixed CVE-2022-37434 in zlib

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

Fixed CVE-2022-37434 in zlib

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

CLSA-2022-1660760405 Fix CVE(s): CVE-2022-37434

SECURITY UPDATE: possible buffer overflow when getting a gzip header extra field with inflate - debian/patches/CVE-2022-37434.patch: ensure that space the user provided with inflateGetHeader is enough when multiple calls of inflate delivers an extra header data. - CVE-2022-37434...

CLSA-2022-1660758906 Fixed CVE-2022-37434 in zlib

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g. see the nodejs/node reference).

...

CVE-2022-37434

A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call inflateGetHeader...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow in inflate.c via a large gzip header extra field. Note: only applications that call inflateGetHeader are affected. Remediation Upgrade zlib to version 1.2.13 or higher. References - GitHub Commit - Vulnerable Code...