Debian Security Advisory DSA 122-1 (zlib, various)

The remote host is missing an update to zlib, various announced via advisory DSA 122-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2006-5823

CVE-2006-5823 is a Linux kernel issue affecting the cramfs file system in 2.6.x where malformed compressed data can trigger memory corruption, leading to a local-denial crash. Connected advisories (RHSA-2007:0436, RHSA-2007:0014, and corresponding openvas entries) enumerate the cramfs memory corr...

CVE-2005-0851

CVE-2005-0851 affects the FileZilla FTP Server up to version 0.9.6. When using MODE Z (zlib compression), it can trigger a denial-of-service via certain file uploads or directory listings, causing an infinite loop. The vulnerability is associated with a NETWORK attack vector, with low complexity ...

CVE-2005-0851: Loop with Unreachable Exit Condition

FileZilla FTP server before 0.9.6, when using MODE Z zlib compression, allows remote attackers to cause a denial of service infinite loop via certain file uploads or directory listings...

CVE-2004-0797

The error handling in the 1 inflate and 2 inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service application crash...

CVE-2004-0797

The error handling in the 1 inflate and 2 inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service application crash...

CVE-2004-0797

The error handling in the 1 inflate and 2 inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service application crash...

The zlib compression library is vulnerable to a denial-of-service condition

Overview Un-handled error conditions in the zlib compression library may allow an attacker to cause a denial-of-service condition. Description There is a vulnerability in the error handling mechanisms of the decompression functions in the zlib compression library. The decompression functions...

CVE-2004-0797

The error handling in the 1 inflate and 2 inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service application crash...

CVE-2004-0797

The error handling in the 1 inflate and 2 inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service application crash...

zlib "gzprintf()" function vulnerable to buffer overflow

Overview A buffer overflow exists in one of the functions included with the zlib compression library. This vulnerability may allow a remote attacker to execute arbitrary code or cause a denial of service. An exploit for this vulnerability is publicly available. Description The zlib website...

Zlib 1.1.4 - Compression Library gzprintf() Buffer Overrun (1)

Zlib 1.1.4 - Compression Library gzprintf Buffer Overrun 1 // source: https://www.securityfocus.com/bid/6913/info A buffer-overrun vulnerability has been reported in the Zlib compression library. Due to the use of 'vsprintf' by an internal Zlib function, an attacker can cause memory to become...

Security Advisory: Vulnerability in zlib library

Cisco Security Advisory: Vulnerability in the zlib Compression Library Revision 1.0 For Public Release 2002 April 03 16:00 UTC +0000 - --------------------------------------------------------------------------- Contents Summary Affected Products Details Impact Software Versions and Fixes Obtainin...

Vulnerability in the zlib Compression Library

...

Advisory CA-2002-07 Double Free Bug in zlib Compression Library

CERT Advisory CA-2002-07 Double Free Bug in zlib Compression Library Original release date: March 12, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Any software that is linked to zlib 1.1.3 or earlier may be affected Data...

Double Free Bug in zlib Compression Library Corrupts malloc's Internal Data Structures

Overview There is a bug in the zlib compression library that may manifest itself as a vulnerability in programs that are linked with zlib. This may allow an attacker to conduct a denial-of-service attack, gather information, or execute arbitrary code. It is important to note that the CERT/CC has...