The vulnerability of the zlib compression library in the “Avora” operating system, related to integer overflows, allows attackers to cause service failures or have unpredictable effects.

The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...

Security update for htmldoc (important)

openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:0895-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...

openSUSE: Security Advisory for htmldoc (openSUSE-SU-2021:0882-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for htmldoc (important)

openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:0893-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...

PT-2021-3377

Name of the Vulnerable Software and Affected Versions Аврора affected versions not specified Description The issue is related to an integer overflow in the zlib compression library of the Аврора operating system. Exploitation of this issue may allow an attacker to cause a denial of service or hav...

SUSE: Security Advisory (SUSE-SU-2016:3209-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2701-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALBA-2021:1603 zlib bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

zlib bug fix and enhancement update

An update is available for zlib. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

zlib bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

EulerOS 2.0 SP3 : wireshark (EulerOS-SA-2021-1859)

According to the versions of the wireshark packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by...

Lazarus APT Hackers are now using BMP images to hide RAT malware

A spear-phishing attack operated by a North Korean threat actor targeting its southern counterpart has been found to conceal its malicious code within a bitmap .BMP image file to drop a remote access trojan RAT capable of stealing sensitive information. Attributing the attack to the Lazarus Group...

SUSE: Security Advisory (SUSE-SU-2017:0004-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:0003-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:2668-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALBA-2021:1092 zlib bug fix and enhancement update

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Bug Fixes and Enhancements: AlmaLinux8.1 - zlib: DFLTCC compression level switching issues BZ1926104 AlmaLinux8.2 - zlib: inflateSyncPoint returns an incorrect result on z15...

zlib bug fix and enhancement update

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Bug Fixes and Enhancements: AlmaLinux8.1 - zlib: DFLTCC compression level switching issues BZ1926104 AlmaLinux8.2 - zlib: inflateSyncPoint returns an incorrect result on z15...

PT-2021-1019

Name of the Vulnerable Software and Affected Versions: zlib versions prior to the fixed version in AlmaLinux 8.1 and 8.2 Description: The issue concerns the zlib packages, which provide a general-purpose lossless data compression library used by many programs. It involves problems with compressio...

zlib:minigzip_fuzzer: Heap-buffer-overflow in minigzip_fuzzer.c

Detailed Report: https://oss-fuzz.com/testcase?key=6604150186049536 Project: zlib Fuzzing Engine: libFuzzer Fuzz Target: minigzipfuzzer Job Type: libfuzzerasani386zlib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf590ba1b Crash State: minigzipfuzzer.c Sanitizer: addre...

zlib-ng:minigzip_fuzzer: Heap-buffer-overflow in minigzip_fuzzer.c

Detailed Report: https://oss-fuzz.com/testcase?key=4788349112025088 Project: zlib-ng Fuzzing Engine: libFuzzer Fuzz Target: minigzipfuzzer Job Type: libfuzzerasani386zlib-ng Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf2651e0f Crash State: minigzipfuzzer.c Sanitizer:...