zlib zlib vulnerabilities and exploits

(subscribe to this query)

zlib 1.2 and later versions allows remote malicious users to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.

Zlib Zlib 1.2.0 Zlib Zlib 1.2.1 Zlib Zlib 1.2.2

MiniZip in zlib up to and including 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip up to and including 0.2.6 i...

5 Github repositories

inftrees.h in zlib 1.2.2 allows remote malicious users to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

Zlib Zlib 1.2.2

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows malicious users to cause a denial of service or possibly execute arbitrary code.

Zlib Zlib 1.1.4

2 EDB exploits

The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).

Zlib Zlib 1.2.1

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module prior to 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent malicious users to cause a denial of service (hang or crash) via a crafted zlib compressed...

Paul Marquess Compress-raw-zlib Perl Module Paul Marquess Compress-raw-zlib Perl Module 2.001 Paul Marquess Compress-raw-zlib Perl Module 2.002 Paul Marquess Compress-raw-zlib Perl Module 2.003 Paul Marquess Compress-raw-zlib Perl Module 2.004 Paul Marquess Compress-raw-zlib Perl Module 2.005 Paul Marquess Compress-raw-zlib Perl Module 2.006 Paul Marquess Compress-raw-zlib Perl Module 2.008 Paul Marquess Compress-raw-zlib Perl Module 2.009 Paul Marquess Compress-raw-zlib Perl Module 2.010 Paul Marquess Compress-raw-zlib Perl Module 2.011 Paul Marquess Compress-raw-zlib Perl Module 2.012

1 EDB exploit

Race condition in pigz prior to 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those of the original file, which might allow local users to bypass intended access permissions while compression is occurrin...

Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem du...

Cloudflare Zlib

Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote malicious users to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.

Zlib Pigz 2.3.1

Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an malicious user to execute arbitrary code via a crafted file to the mz_path_resolve function in the mz_os.c file.

Zlib-ng Minizip-ng 4.0.2

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook