Mandrake Linux Security Advisory : perl-Compress-Zlib (MDKSA-2005:196)

The perl Compress::Zlib module contains an internal copy of the zlib library that was vulnerable to CVE-2005-1849 and CVE-2005-2096. This library was updated with version 1.35 of Compress::Zlib. An updated perl-Compress-Zlib package is now available to provide the fixed module. %NASLMINLEVEL 7030...

USN-151-3: zlib vulnerabilities

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Since aide is statically linked against the zlib library, it is also affected by these issues. The updated packagages...

SUSE-SA:2005:050: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:050 kernel. The Linux kernel was updated to fix the following security issues: - CVE-2005-2457: A problem in decompression of files on 'zisofs' filesystem was fixed. - CVE-2005-2458: A potential buffer overflow in the zlib...

Mandrake Linux Security Advisory : zlib (MDKSA-2005:124)

A previous zlib update MDKSA-2005:112; CVE-2005-2096 fixed an overflow flaw in the zlib program. While that update did indeed fix the reported overflow issue, Markus Oberhumber discovered additional ways that a specially crafted compressed stream could trigger an overflow. An attacker could creat...

GLSA-200509-18 : Qt: Buffer overflow in the included zlib library

The remote host is affected by the vulnerability described in GLSA-200509-18 Qt: Buffer overflow in the included zlib library Qt links to a bundled vulnerable version of zlib when emerged with the zlib USE-flag disabled. This may lead to a buffer overflow. Impact : By creating a specially crafted...

Slackware 10.0 / 10.1 / current : zlib (SSA:2005-203-03)

New zlib packages are available for Slackware 10.0, 10.1, and -current to fix an additional crash issue. zlib 1.1.x is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory...

Mandrake Linux Security Advisory : wxPythonGTK (MDKSA-2005:144)

Wouter Hanegraaff discovered that the TIFF library did not sufficiently validate the 'YCbCr subsampling' value in TIFF image headers. Decoding a malicious image with a zero value resulted in an arithmetic exception, which can cause a program that uses the TIFF library to crash. wxPythonGTK uses a...

[SECURITY] [DSA 797-2] Updated zsync i386 packages fix build error

-------------------------------------------------------------------------- Debian Security Advisory DSA 797-2 [email protected] http://www.debian.org/security/ Michael Stone September 28th, 2005 http://www.debian.org/security/faq -...

Qt: Buffer overflow in the included zlib library

Background Qt is a cross-platform GUI toolkit used by KDE. Description Qt links to a bundled vulnerable version of zlib when emerged with the zlib USE-flag disabled. This may lead to a buffer overflow. Impact By creating a specially crafted compressed data stream, attackers can overwrite data...

zsync Multiple zlib Vulnerabilities

zsync Multiple zlib Vulnerabilities Secunia Advisory: SA16672 Release Date: 2005-09-02 Critical: Moderately critical Impact: DoS System access Where: From remote Solution Status: Unpatched Software: zsync 0.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories...

[SECURITY] [DSA 797-1] New zsync packages fix DOS

-------------------------------------------------------------------------- Debian Security Advisory DSA 797-1 [email protected] http://www.debian.org/security/ Michael Stone September 1st, 2005 http://www.debian.org/security/faq -...

DSA-797-1 zsync - buffer overflow

Bulletin has no description...

DSA-797-2 zsync - buffer overflow

zsync, a file transfer program, includes a modified local copy of the zlib library, and is vulnerable to certain bugs fixed previously in the zlib package. There was a build error for the sarge i386 proftpd packages released in DSA 797-1. A new build, zsync\0.3.3-1.sarge.1.2, has been prepared to...

CVE-2005-2458

inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service kernel crash via a compressed file with "improper tables"...

CVE-2005-2459

The huftbuild function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service kernel crash via a certain compressed file that leads to a null pointer dereference, a different vulnerability than...

CVE-2005-2458

inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service kernel crash via a compressed file with "improper tables"...

CVE-2005-2458

CVE-2005-2458 affects the Linux kernel where inflate.c in the zlib routines used by the kernel before 2.6.12.5 can be exploited by remote attackers to crash the kernel via a crafted compressed file (improper tables). The connected advisories confirm this vulnerability across multiple distribution...

MDKSA-2005:144 - Updated wxPythonGTK packages several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Update Advisory Package name: wxPythonGTK Advisory ID: MDKSA-2005:144 Date: August 18th, 2005 Affected versions: 10.1, 10.2, Corporate 3.0 Problem Description: Wouter Hanegraaff discovered that the TIFF library did not...

Mac OS X Multiple Vulnerabilities (Security Update 2005-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2005-007 applied. This security update contains fixes for the following products : - Apache 2 - AppKit - Bluetooth - CoreFoundation - CUPS - Directory Services - HItoolbox - Kerberos - loginwindow -...

Compress::Zlib: Buffer overflow

Background The Compress::Zlib is a Perl module which provides an interface to the zlib compression library. Description Compress::Zlib 1.34 contains a local vulnerable version of zlib, which may lead to a buffer overflow. Impact By creating a specially crafted compressed data stream, attackers ca...