DSA-5218: -1 zlib -- security update

Published Aug 25, 2022

Updated

Evgeny Legerov reported a heap-based buffer overflow vulnerability in the inflate operation in zlib, which could result in denial of service or potentially the execution of arbitrary code if specially crafted input is processed.

Affected Software

2 affected components

debian/zlib

Event History

Aug 25, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-37434

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

An attacker must be able to cause software using zlib to process specially crafted compressed input during an inflate operation.

What is the likely impact if a vulnerable application processes malicious input?

The heap-based buffer overflow could cause denial of service and may potentially allow arbitrary code execution.

Which Debian software package is identified as affected?

The advisory identifies the Debian zlib package. The provided information does not specify affected or fixed package versions.

DSA-5218: -1 zlib -- security update

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

What is the likely impact if a vulnerable application processes malicious input?

Which Debian software package is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

What is the likely impact if a vulnerable application processes malicious input?

Which Debian software package is identified as affected?