REDHAT-BUG-2116639: Buffer Overflow
First published: Tue Aug 09 2022(Updated: )
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference). <a href="https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764">https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764</a> <a href="https://github.com/ivd38/zlib_overflow">https://github.com/ivd38/zlib_overflow</a> <a href="https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1">https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1</a> <a href="https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063">https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063</a> <a href="http://www.openwall.com/lists/oss-security/2022/08/05/2">http://www.openwall.com/lists/oss-security/2022/08/05/2</a> <a href="https://github.com/curl/curl/issues/9271">https://github.com/curl/curl/issues/9271</a> <a href="http://www.openwall.com/lists/oss-security/2022/08/09/1">http://www.openwall.com/lists/oss-security/2022/08/09/1</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| zlib | <=1.2.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764
- https://github.com/ivd38/zlib_overflow
- https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1
- https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063
- http://www.openwall.com/lists/oss-security/2022/08/05/2
- https://github.com/curl/curl/issues/9271
- http://www.openwall.com/lists/oss-security/2022/08/09/1
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116653
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116655
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116656
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116660
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116657
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116661
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116658
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116662
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116659
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116663
- https://github.com/backuppc/backuppc/issues/478
- https://access.redhat.com/errata/RHSA-2022:7106
- https://access.redhat.com/errata/RHSA-2022:7314
- https://access.redhat.com/errata/RHSA-2022:7793
- https://access.redhat.com/errata/RHSA-2022:8291
- https://access.redhat.com/errata/RHSA-2022:8841
- https://access.redhat.com/security/cve/cve-2022-37434
- https://access.redhat.com/errata/RHSA-2023:1095
- https://access.redhat.com/errata/RHSA-2024:0254
- https://bugzilla.redhat.com/show_bug.cgi?id=2116639
Frequently Asked Questions
What is the severity of REDHAT-BUG-2116639?
The severity of REDHAT-BUG-2116639 is considered high due to potential exploitation through heap-based buffer overflow or over-read.
How do I fix REDHAT-BUG-2116639?
To fix REDHAT-BUG-2116639, update to the latest version of zlib that addresses this vulnerability.
Which applications are affected by REDHAT-BUG-2116639?
Applications that call inflateGetHeader and bundle the affected zlib source code are at risk from REDHAT-BUG-2116639.
What is the nature of the vulnerability in REDHAT-BUG-2116639?
REDHAT-BUG-2116639 describes a heap-based buffer over-read or overflow vulnerability in zlib when handling large gzip header extra fields.
What version of zlib contains the vulnerability REDHAT-BUG-2116639?
zlib versions up to and including 1.2.12 contain the vulnerability described in REDHAT-BUG-2116639.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/references
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2022-37434
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/zlib
- canonical/zlib