Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/zlib@1:1.2.13.dfsg-1
purl pkg:deb/debian/zlib@1:1.2.13.dfsg-1
Next non-vulnerable version 1:1.3.dfsg+really1.3.2-3
Latest non-vulnerable version 1:1.3.dfsg+really1.3.2-3
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-ac5e-emja-v3fe
Aliases:
CVE-2026-27171
zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions
1:1.3.dfsg+really1.3.2-3
Affected by 0 other vulnerabilities.
VCID-v6pc-48dg-4kad
Aliases:
CVE-2023-45853
GHSA-mq29-j5xf-cjwr
Integer Overflow or Wraparound MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.
1:1.3.dfsg+really1.3.1-1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:54:27.199414+00:00 Debian Importer Affected by VCID-ac5e-emja-v3fe https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:02:55.682366+00:00 Debian Importer Affected by VCID-v6pc-48dg-4kad https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:07:41.688688+00:00 Debian Importer Affected by VCID-ac5e-emja-v3fe https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:03:58.715458+00:00 Debian Importer Affected by VCID-v6pc-48dg-4kad https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-08T19:24:49.633633+00:00 Debian Importer Affected by VCID-ac5e-emja-v3fe https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T17:55:03.950796+00:00 Debian Importer Affected by VCID-v6pc-48dg-4kad https://security-tracker.debian.org/tracker/data/json 38.1.0