CVE-2022-1271

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...

CVE-2022-1271

CVE-2022-1271 affects GNU gzip's zgrep: an attacker can cause arbitrary file writes by supplying crafted multi-line filenames. Two or more consecutive newlines in filenames lead to content and target file names being embedded in the same path, and insufficient validation enables remote, low-privi...

CVE-2022-1271

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...

CVE-2022-1271

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...

FreeBSD : FreeBSD -- zlib heap buffer overflow (a1323a76-28f1-11ed-a72a-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a1323a76-28f1-11ed-a72a-002590c1f29c advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via ...

Debian DSA-5218-1 : zlib - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5218 advisory. Evgeny Legerov reported a heap-based buffer overflow vulnerability in the inflate operation in zlib, which could result in denial of service or potentially the execution o...

Ubuntu: Security Advisory (USN-5378-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-349-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2022-1661443990 Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

CLSA-2022-1661443683 Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

CLSA-2022-1661442999 Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

CLSA-2022-1661442133 Fixed CVE-2022-37434 in rsync

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

Important: Red Hat Security Advisory: Node Health Check Operator 0.3.1 security update

An update for node-healthcheck-operator-bundle-container and node-healthcheck-operator-container is now available for Node Healthcheck Operator 0.3 for RHEL 8. This Operator is delivered by Red Hat Workload Availability. Red Hat Product Security has rated this update as having a security impact o...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.7.56 security and bug fix update

Red Hat OpenShift Container Platform release 4.7.56 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

OESA-2022-1843 zlib security update

Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms. Security Fixes: zlib through 1.2.12 has a heap-based buffer over-read or buffer...

OESA-2022-1853 rsync security update

Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...

MAL-2022-6 Malicious code in -gzip-ize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a0dd1ae21dc3f5787d43924a3612a418e301478780e539aac0bdca13877cb12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

golang: compress/gzip: stack exhaustion in Reader.Read

A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion...

SUSE-SU-2022:2846-1 Security update for zlib

This update for zlib fixes the following issues: - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field bsc1202175...