3134 matches found
CVE-2018-25032: Out-of-bounds Write
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
CVE-2018-25032
CVE-2018-25032 affects zlib prior to 1.2.12 and causes memory corruption during deflate when the input contains many distant matches. The linked Astra Linux advisory reiterates the zlib memory corruption in zlib before 1.2.12, and multiple Mariner/CBL advisories show affected packages (e.g., teck...
CVE-2018-25032
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
CVE-2018-25032
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
SUSE-RU-2022:0861-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: openssl-11: - CVE-2022-0778: Infinite loop in BNmodsqrt reachable when parsing certificates bsc1196877. - Fix PAC pointer authentication in ARM bsc1195856 - Pull libopenssl-11 when updating openssl-11 with the same version bsc1195792 - FIPS:...
SUSE-SU-2022:0860-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: Security issue fixed: - CVE-2022-0778: Infinite loop in BNmodsqrt reachable when parsing certificates bsc1196877. Non-security issues fixed: - Fix PAC pointer authentication in ARM. bsc1195856 - Pull libopenssl-11 when updating openssl-11 wit...
[SECURITY] Fedora 35 Update: zziplib-0.13.72-1.fc35
The zziplib library is intentionally lightweight, it offers the ability to easily extract data from files archived in a single zip file. Applications can bundle files into a single zip archive and access them. The implementation is based only on the free subset of compression with the zlib...
[SECURITY] Fedora 34 Update: zziplib-0.13.72-1.fc34
The zziplib library is intentionally lightweight, it offers the ability to easily extract data from files archived in a single zip file. Applications can bundle files into a single zip archive and access them. The implementation is based only on the free subset of compression with the zlib...
Fedora: Security Advisory for zziplib (FEDORA-2022-8109b472a3)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Mageia: Security Advisory (MGASA-2020-0108)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important Photon OS Security Update - PHSA-2022-0464
Updates of 'linux', 'linux-esx', 'polkit' packages of Photon OS have been released...
[SECURITY] Fedora 35 Update: zstd-1.5.1-6.fc35
Zstd, short for Zstandard, is a fast lossless compression algorithm, targeting real-time compression scenarios at zlib-level compression ratio...
Uninitialized Use Of State
zlib causes a use of uninitialized check value. The inflate does not handle the case when UPDATE is called with state-check as its first parameter, without a guarantee that this value has been initialized...
The vulnerability of the zlib compression library in the “Avora” operating system allows a hacker to cause a service failure or have an unpredictable impact.
The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...
PT-2021-4483
Name of the Vulnerable Software and Affected Versions Аврора affected versions not specified Description The issue is related to an integer overflow in the zlib compression library of the Аврора operating system. Exploitation of this issue may allow an attacker to cause a denial of service or hav...
Security update for dovecot23 (moderate)
openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2021:2892-1 Rating: moderate References: 1187418 1187419 1187420 SLE-19970 Cross-References: CVE-2020-28200 CVE-2021-29157 CVSS scores: CVE-2020-28200 NVD : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L...
zlib:example_dict_fuzzer: Use-of-uninitialized-value in fill_window
Project: https://github.com/madler/zlib.git Detailed Report: https://oss-fuzz.com/testcase?key=5103363211526144 Project: zlib Fuzzing Engine: libFuzzer Fuzz Target: exampledictfuzzer Job Type: libfuzzermsanzlib Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Dozens of Vulnerable NuGet Packages Allow Attackers to Target .NET Platform
An analysis of off-the-shelf packages hosted on the NuGet repository has revealed 51 unique software components to be vulnerable to actively exploited, high-severity vulnerabilities, once again underscoring the threat posed by third-party dependencies to the software development process. In light...
Advisory ROSA-SA-2021-2004
Software: zlib 1.2.7 OS: Cobalt 7.9 CVE-ID: CVE-2013-0296 CVE-Crit: HIGH CVE-DESC: race condition in pigz before 2.2.5 uses permissions derived from umask when compressing a file before setting that file's permissions to match those of the source file, which may allow local users to bypass implie...
PowerISO DMG File Format Handler memory corruption vulnerability
Summary A memory corruption vulnerability exists in the DMG File Format Handler functionality of PowerISO 7.9. A specially crafted DMG file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. The vendor fixed it in a bug-release of the curre...