3127 matches found
zlib: Double free in inflateEnd
The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once a "double free", which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data...
Moderate: Red Hat Security Advisory: : Vulnerability in zlib library (powertools)
Update 20 Mar 2002: VNC packages updated to fix another denial of service vulnerability caused by the previous update. Thanks to Const Kaplinsky for discovering this issue. The zlib compression library provides in-memory compression and decompression functions. It is widely used throughout Linux...
rsync update fixes security problems
New rsync packages are available to fix security problems. Here's the information from the Slackware 8.0 ChangeLog: ---------------------------- Mon Mar 11 15:09:26 PST 2002 patches/packages/rsync.tgz: Upgraded to rsync-2.5.3. This fixes two security problems: Make sure that supplementary groups...
zlib upgrade fixes vulnerability
New zlib packages are available to fix a security problem which may impact programs that link with zlib. Here's the information from the Slackware 8.0 ChangeLog: ---------------------------- Mon Mar 11 13:32:40 PST 2002 patches/packages/zlib.tgz: Upgraded to zlib-1.1.4. This fixes a security...
Double Free Bug in zlib Compression Library Corrupts malloc's Internal Data Structures
Overview There is a bug in the zlib compression library that may manifest itself as a vulnerability in programs that are linked with zlib. This may allow an attacker to conduct a denial-of-service attack, gather information, or execute arbitrary code. It is important to note that the CERT/CC has...
