Lucene search
AlmaLinuxALSA-2022:8291HistoryNov 15, 2022 - 12:00 a.m.
Moderate: rsync security and bug fix update
2022-11-1500:00:00
errata.almalinux.org
15
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
71.6%
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.
Security Fix(es):
- zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | noarch | rsync-daemon | < 3.2.3-18.el9 | rsync-daemon-3.2.3-18.el9.noarch.rpm |
| almalinux | 9 | ppc64le | rsync | < 3.2.3-18.el9 | rsync-3.2.3-18.el9.ppc64le.rpm |
| almalinux | 9 | s390x | rsync | < 3.2.3-18.el9 | rsync-3.2.3-18.el9.s390x.rpm |
| almalinux | 9 | aarch64 | rsync | < 3.2.3-18.el9 | rsync-3.2.3-18.el9.aarch64.rpm |
| almalinux | 9 | x86_64 | rsync | < 3.2.3-18.el9 | rsync-3.2.3-18.el9.x86_64.rpm |
Related
redhat
redhat
(RHSA-2023:1095) Moderate: zlib security update
2023-03-07 08:56:16
(RHSA-2022:8291) Moderate: rsync security and bug fix update
2022-11-15 06:20:39
(RHSA-2024:0254) Moderate: rsync security update
2024-01-15 15:28:49
cbl_mariner
cbl_mariner
CVE-2022-37434 affecting package zlib for versions less than 1.2.12-2
2022-09-13 22:36:39
CVE-2022-37434 affecting package zlib 1.2.12-1
2022-08-24 22:05:05
openvas
openvas
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2022-2715)
2022-11-04 00:00:00
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2023-2205)
2023-06-12 00:00:00
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2023-1241)
2023-01-12 00:00:00
slackware
slackware
[slackware-security] zlib
2022-10-15 20:38:53
nessus
nessus
AIX 7.3 TL 1 : zlib (IJ44986)
2023-07-26 00:00:00
FreeBSD : FreeBSD -- zlib heap buffer overflow (a1323a76-28f1-11ed-a72a-002590c1f29c)
2022-08-31 00:00:00
SUSE SLED15 / SLES15 Security Update : zlib (SUSE-SU-2022:2947-1)
2022-09-01 00:00:00
cloudfoundry
cloudfoundry
USN-5570-1: zlib vulnerability | Cloud Foundry
2022-08-25 00:00:00
USN-5570-1: zlib vulnerability | Cloud Foundry
2023-01-19 00:00:00
USN-5573-1: rsync vulnerability | Cloud Foundry
2023-01-19 00:00:00
suse
suse
Security update for zlib (important)
2022-09-01 00:00:00
Security update for zlib (important)
2022-08-31 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0236
2022-08-23 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0236
2022-08-23 00:00:00
osv
osv
zlib vulnerability
2022-08-17 22:44:40
Moderate: zlib security update
2022-10-25 07:22:56
CVE-2022-37434
2022-08-05 07:15:07
amazon
amazon
fedora
fedora
[SECURITY] Fedora 37 Update: zlib-1.2.12-5.fc37
2022-09-14 00:23:02
[SECURITY] Fedora 35 Update: zlib-1.2.11-32.fc35
2022-09-16 01:46:40
[SECURITY] Fedora 36 Update: zlib-1.2.11-33.fc36
2022-09-02 09:55:06
alpinelinux
alpinelinux
CVE-2022-37434
2022-08-05 07:15:07
redos
redos
ROS-20221207-01
2022-12-07 00:00:00
cgr
cgr
CVE-2022-37434 vulnerabilities
2024-05-19 03:07:16
oraclelinux
oraclelinux
zlib security update
2022-11-02 00:00:00
zlib security update
2023-03-08 00:00:00
rsync security and bug fix update
2022-11-22 00:00:00
cloudlinux
cloudlinux
Fixed CVE-2022-37434 in zlib
2022-08-17 18:47:33
Fixed CVE-2022-37434 in rsync
2022-08-25 15:56:39
veracode
veracode
Denial Of Service (DoS)
2022-08-09 02:04:05
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Zlib
2022-09-30 10:20:36
Exploit for Out-of-bounds Write in Zlib
2022-09-14 07:28:23
Exploit for Out-of-bounds Write in Zlib
2024-02-02 14:25:28
f5
f5
K67213091 : Zlib vulnerability CVE-2022-37434
2022-10-21 00:00:00
ubuntu
ubuntu
zlib vulnerability
2022-10-17 00:00:00
zlib vulnerability
2022-08-17 00:00:00
rsync vulnerability
2022-08-18 00:00:00
almalinux
almalinux
Moderate: rsync security and enhancement update
2022-11-08 00:00:00
Moderate: zlib security update
2022-10-25 00:00:00
Moderate: zlib security update
2022-11-02 00:00:00
debian
debian
[SECURITY] [DSA 5218-1] zlib security update
2022-08-25 19:51:59
[SECURITY] [DLA 3103-1] zlib security update
2022-09-12 09:01:16
debiancve
debiancve
CVE-2022-37434
2022-08-05 07:15:07
rocky
rocky
zlib security update
2022-11-02 13:50:56
zlib security update
2022-10-25 07:22:56
rsync security and enhancement update
2022-11-08 06:29:11
ibm
ibm
Security Bulletin: IBM Planning Analytics Workspace has addressed a vulnerability in GNU zlib (CVE-2022-37434)
2023-06-07 21:00:25
redhatcve
redhatcve
CVE-2022-37434
2022-08-09 06:36:51
aix
aix
AIX is vulnerable to denial of service due to zlib and zlibNX
2023-07-25 11:05:17
mageia
mageia
Updated zlib packages fix security vulnerability
2022-09-16 22:39:55
cvelist
cvelist
CVE-2022-37434
2022-08-05 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:13.zlib
2022-08-30 00:00:00
freebsd
freebsd
FreeBSD -- zlib heap buffer overflow
2022-08-30 00:00:00
qt
qt
Security advisory: zlib in Qt
2022-09-12 00:00:00
centos
centos
minizip, zlib security update
2023-03-08 16:30:28
rosalinux
rosalinux
Advisory ROSA-SA-2023-2131
2023-03-14 14:13:27
wolfi
wolfi
CVE-2022-37434 vulnerabilities
2024-06-14 15:38:10
ubuntucve
ubuntucve
CVE-2022-37434
2022-08-05 00:00:00
nvd
nvd
CVE-2022-37434
2022-08-05 07:15:07
prion
prion
Heap overflow
2022-08-05 07:15:00
cve
cve
CVE-2022-37434
2022-08-05 07:15:07
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
71.6%
Related for ALSA-2022:8291