CVE-2022-3252

Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects HTTPRequestDecompressor and HTTPResponseDecompressor both failed to detect when the decompressed body was...

PT-2022-21351 · Unknown · Swiftnio Extras

Name of the Vulnerable Software and Affected Versions: SwiftNIO Extras affected versions not specified Description: The issue is related to improper detection of complete HTTP body decompression in SwiftNIO Extras. This can lead to an infinite loop and denial-of-service when trailing junk data is...

Medium: zlib

Issue Overview: A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call inflateGetHeader. CVE-2022-37434 Affected Packages: zlib Note: This advisory is...

openSUSE 15 Security Update : mupdf (openSUSE-SU-2022:10126-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10126-1 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 ...

Mageia: Security Advisory (MGASA-2022-0328)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerabilities in Linux Kernel, OpenSSL, Golang Go, and Zlib may affect IBM Spectrum Protect Plus

Summary Linux Kernel, OpenSSL, Golang Go, and Zlib vulnerabilities such as obtaining sensitive information, execution of arbitrary code, denial of service, and bypassing security restrictions may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID:CVE-2022-2097 DESCRIPTION: OpenSSL coul...

Fedora: Security Advisory for zlib (FEDORA-2022-0b517a5397)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for mupdf (moderate)

openSUSE Security Update: Security update for mupdf Announcement ID: openSUSE-SU-2022:10126-1 Rating: moderate References: 1202858 Cross-References: CVE-2018-25032 CVE-2021-4216 CVSS scores: CVE-2018-25032 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-25032 SUSE: 8.1...

MGASA-2022-0328 Updated zlib packages fix security vulnerability

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

Updated zlib packages fix security vulnerability

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

[SECURITY] Fedora 35 Update: zlib-1.2.11-32.fc35

Zlib is a general-purpose, patent-free, lossless data compression library which is used by many different programs...

Fedora: Security Advisory for zlib (FEDORA-2022-3c28ae0cd8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: zlib-1.2.12-5.fc37

Zlib is a general-purpose, patent-free, lossless data compression library which is used by many different programs...

CVE-2022-37434 affecting package zlib for versions less than 1.2.12-2

CVE-2022-37434 affecting package zlib for versions less than 1.2.12-2. A patched version of the package is available...

Debian: Security Advisory (DLA-3103-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3103-1] zlib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3103-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 12, 2022 https://wiki.debian.org/LTS -...

DLA-3103-1 zlib - security update

Bulletin has no description...

Security advisory: zlib in Qt

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field and has been assigned the CVE id CVE-2022-37434. As this only affects applications that call inflateGetHeader directly then applications using Qt are not directly...

Debian dla-3103 : lib32z1 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3103 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3103-1 [email protected] https://www.debian.org/lts/security/...

Security Bulletin: IBM Sterling Connect:Direct for i5/OS is vulnerable to denial of service due to Zlib (CVE-2018-25032)

Summary There is a vulnerability in the Zlib library used by IBM Sterling Connect:Direct for i5/OS. IBM Sterling Connect:Direct for i5/OS has addressed the applicable issue by upgrading to 1.2.12 Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service,...