zlib

New zlib packages are available for Slackware 10.0, 10.1, and -current to fix an additional crash issue. zlib 1.1.x is not affected. Here are the details from the Slackware 10.1 ChangeLog: patches/packages/zlib-1.2.3-i486-1.tgz: Upgraded to zlib-1.2.3. This fixes an additional crash not fixed by...

zlib: Buffer overflow

Background zlib is a widely used free and patent unencumbered data compression library. Description zlib improperly handles invalid data streams which could lead to a buffer overflow. Impact By creating a specially crafted compressed data stream, attackers can overwrite data structures for...

RHEL 4 : zlib (RHSA-2005:584)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:584 advisory. Zlib is a general-purpose lossless data compression library that is used by many different programs. A previous zlib update, RHSA-2005:569 CAN-2005-20...

GLSA-200507-19 : zlib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200507-19 zlib: Buffer overflow zlib improperly handles invalid data streams which could lead to a buffer overflow. Impact : By creating a specially crafted compressed data stream, attackers can overwrite data structures for...

Multiple MySQL database management system vulnerabilities

Multiple DoS, vulnerable zlib version is used...

zlib security update

CentOS Errata and Security Advisory CESA-2005:584 Updated zlib packages that fix a buffer overflow are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Zlib is a general-purpose lossless data...

Important: Red Hat Security Advisory: zlib security update

Updated zlib packages that fix a buffer overflow are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Zlib is a general-purpose lossless data compression library that is used by many different...

zlib DoS

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...

[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA 763-1 [email protected] http://www.debian.org/security/ Michael Stone July 20, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA 763-1 [email protected] http://www.debian.org/security/ Michael Stone July 20, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Debian DSA-763-1 : zlib - remote DoS

Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file. This problem does not affect the old stable distribution woody. %NASLMINLEVEL 70300 ...

DSA-763-1 zlib - buffer overflow

Bulletin has no description...

SUSE-SA:2005:039: zlib

The remote host is missing the patch for the advisory SUSE-SA:2005:039 zlib. A denial of service condition was fixed in the zlib library. Any program using zlib to decompress data can be crashed by a specially handcrafted invalid data stream. This includes web browsers or email programs able to...

Slackware 10.0 / 10.1 / current : zlib DoS (SSA:2005-189-01)

New zlib packages are available for Slackware 10.0, 10.1, and -current to fix a denial of service security issue. zlib 1.1.x is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory...

SSA-18703 zlib upgrade fixes vulnerability

New zlib packages are available to fix a security problem which may impact programs that link with zlib. Here's the information from the Slackware 8.0 ChangeLog: ---------------------------- Mon Mar 11 13:32:40 PST 2002 patches/packages/zlib.tgz: Upgraded to zlib-1.1.4. This fixes a security...

Slackware 10.0 / current : zlib DoS (SSA:2004-278-02)

New zlib packages are available for Slackware 10.0 and -current to fix a possible denial of service security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2004-278-02. The text...

zlib DoS

New zlib packages are available for Slackware 10.0, 10.1, and -current to fix a denial of service security issue. zlib 1.1.x is not affected. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

Mandrake Linux Security Advisory : zlib (MDKSA-2005:112)

Tavis Ormandy of the Gentoo Security Project discovered a vulnerability in zlib where a certain data stream would cause zlib to corrupt a data structure, resulting in the linked application to dump core. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable...

zlib inflate() routine vulnerable to buffer overflow

Overview A buffer overflow in the zlib compression library may cause any application linked to zlib to improperly and immediately terminate. Description There is a buffer overflow in the zlib data-compression library caused by a lack of bounds checking in the inflate routine. If an attacker...

USN-148-1: zlib vulnerability

Tavis Ormandy discovered that zlib did not properly verify data streams. Decompressing certain invalid compressed files caused corruption of internal data structures, which caused applications which link to zlib to crash. Specially crafted input might even have allowed arbitrary code execution...