Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-37434HistoryAug 05, 2022 - 7:15 a.m.
CVE-2022-37434
2022-08-0507:15:07
Debian Security Bug Tracker
security-tracker.debian.org
135
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
71.6%
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libz-mingw-w64 | < 1.2.12+dfsg-2 | libz-mingw-w64_1.2.12+dfsg-2_all.deb |
| Debian | 11 | all | libz-mingw-w64 | <= 1.2.11+dfsg-2 | libz-mingw-w64_1.2.11+dfsg-2_all.deb |
| Debian | 10 | all | libz-mingw-w64 | <= 1.2.11+dfsg-2 | libz-mingw-w64_1.2.11+dfsg-2_all.deb |
| Debian | 999 | all | libz-mingw-w64 | < 1.2.12+dfsg-2 | libz-mingw-w64_1.2.12+dfsg-2_all.deb |
| Debian | 13 | all | libz-mingw-w64 | < 1.2.12+dfsg-2 | libz-mingw-w64_1.2.12+dfsg-2_all.deb |
| Debian | 12 | all | zlib | < 1:1.2.11.dfsg-4.1 | zlib_1:1.2.11.dfsg-4.1_all.deb |
| Debian | 11 | all | zlib | < 1:1.2.11.dfsg-2+deb11u2 | zlib_1:1.2.11.dfsg-2+deb11u2_all.deb |
| Debian | 10 | all | zlib | < 1:1.2.11.dfsg-1+deb10u2 | zlib_1:1.2.11.dfsg-1+deb10u2_all.deb |
| Debian | 999 | all | zlib | < 1:1.2.11.dfsg-4.1 | zlib_1:1.2.11.dfsg-4.1_all.deb |
| Debian | 13 | all | zlib | < 1:1.2.11.dfsg-4.1 | zlib_1:1.2.11.dfsg-4.1_all.deb |
Related
nessus
nessus
AIX 7.3 TL 0 : zlib (IJ46030)
2023-07-26 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : rsync vulnerability (USN-5573-1)
2022-08-19 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:2846-1)
2022-08-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2847-1)
2022-08-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2845-1)
2022-08-19 00:00:00
cloudfoundry
cloudfoundry
USN-5570-1: zlib vulnerability | Cloud Foundry
2023-01-19 00:00:00
USN-5573-1: rsync vulnerability | Cloud Foundry
2023-01-19 00:00:00
USN-5570-1: zlib vulnerability | Cloud Foundry
2022-08-25 00:00:00
osv
osv
Moderate: rsync security and enhancement update
2022-11-08 06:29:11
Moderate: rsync security and bug fix update
2022-11-15 06:20:39
CVE-2022-37434
2022-08-05 07:15:07
rocky
rocky
zlib security update
2022-10-25 07:22:56
zlib security update
2022-11-02 13:50:56
rsync security and enhancement update
2022-11-08 06:29:11
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Zlib
2022-09-30 10:20:36
Exploit for Out-of-bounds Write in Zlib
2022-09-14 07:28:23
Exploit for Out-of-bounds Write in Zlib
2024-02-02 14:25:28
debian
debian
[SECURITY] [DSA 5218-1] zlib security update
2022-08-25 19:51:59
[SECURITY] [DLA 3103-1] zlib security update
2022-09-12 09:01:16
ibm
ibm
Security Bulletin: IBM Planning Analytics Workspace has addressed a vulnerability in GNU zlib (CVE-2022-37434)
2023-06-07 21:00:25
oraclelinux
oraclelinux
zlib security update
2022-11-02 00:00:00
rsync security and bug fix update
2022-11-22 00:00:00
zlib security update
2022-10-26 00:00:00
cloudlinux
cloudlinux
Fixed CVE-2022-37434 in zlib
2022-08-17 18:47:33
Fixed CVE-2022-37434 in rsync
2022-08-25 15:56:39
veracode
veracode
Denial Of Service (DoS)
2022-08-09 02:04:05
almalinux
almalinux
Moderate: rsync security and enhancement update
2022-11-08 00:00:00
Moderate: rsync security and bug fix update
2022-11-15 00:00:00
Moderate: zlib security update
2022-10-25 00:00:00
ubuntu
ubuntu
zlib vulnerability
2022-10-17 00:00:00
zlib vulnerability
2022-08-17 00:00:00
rsync vulnerability
2022-08-18 00:00:00
f5
f5
K67213091 : Zlib vulnerability CVE-2022-37434
2022-10-21 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-37434 affecting package zlib for versions less than 1.2.12-2
2022-09-13 22:36:39
CVE-2022-37434 affecting package zlib 1.2.12-1
2022-08-24 22:05:05
slackware
slackware
[slackware-security] zlib
2022-10-15 20:38:53
suse
suse
Security update for zlib (important)
2022-09-01 00:00:00
Security update for zlib (important)
2022-08-31 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0236
2022-08-23 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0236
2022-08-23 00:00:00
redhat
redhat
(RHSA-2022:8291) Moderate: rsync security and bug fix update
2022-11-15 06:20:39
(RHSA-2024:0254) Moderate: rsync security update
2024-01-15 15:28:49
(RHSA-2023:1095) Moderate: zlib security update
2023-03-07 08:56:16
amazon
amazon
fedora
fedora
[SECURITY] Fedora 37 Update: zlib-1.2.12-5.fc37
2022-09-14 00:23:02
[SECURITY] Fedora 35 Update: zlib-1.2.11-32.fc35
2022-09-16 01:46:40
[SECURITY] Fedora 36 Update: zlib-1.2.11-33.fc36
2022-09-02 09:55:06
alpinelinux
alpinelinux
CVE-2022-37434
2022-08-05 07:15:07
redos
redos
ROS-20221207-01
2022-12-07 00:00:00
cgr
cgr
CVE-2022-37434 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2022-37434
2022-08-09 06:36:51
aix
aix
AIX is vulnerable to denial of service due to zlib and zlibNX
2023-07-25 11:05:17
mageia
mageia
Updated zlib packages fix security vulnerability
2022-09-16 22:39:55
cvelist
cvelist
CVE-2022-37434
2022-08-05 00:00:00
freebsd
freebsd
FreeBSD -- zlib heap buffer overflow
2022-08-30 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:13.zlib
2022-08-30 00:00:00
qt
qt
Security advisory: zlib in Qt
2022-09-12 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2131
2023-03-14 14:13:27
centos
centos
minizip, zlib security update
2023-03-08 16:30:28
wolfi
wolfi
CVE-2022-37434 vulnerabilities
2024-06-14 15:38:10
nvd
nvd
CVE-2022-37434
2022-08-05 07:15:07
prion
prion
Heap overflow
2022-08-05 07:15:00
ubuntucve
ubuntucve
CVE-2022-37434
2022-08-05 00:00:00
cve
cve
CVE-2022-37434
2022-08-05 07:15:07
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
71.6%
Related for DEBIANCVE:CVE-2022-37434