Search for packages
| purl | pkg:deb/debian/gzip@1.3.5-10sarge2 |
| Next non-vulnerable version | 1.10-4+deb11u1 |
| Latest non-vulnerable version | 1.10-4+deb11u1 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-68k1-pc22-abf3
Aliases: CVE-2006-4338 |
Affected by 3 other vulnerabilities. |
|
|
VCID-6bnb-d9ev-gkch
Aliases: CVE-2006-4336 |
Affected by 3 other vulnerabilities. |
|
|
VCID-92j1-y3t2-v7cw
Aliases: CVE-2006-4335 |
Affected by 3 other vulnerabilities. |
|
|
VCID-9pkp-cgrj-rudx
Aliases: CVE-2009-2624 |
Affected by 1 other vulnerability. |
|
|
VCID-cgxa-khrw-c3at
Aliases: CVE-2006-4337 |
Affected by 3 other vulnerabilities. |
|
|
VCID-memf-4ncn-97ds
Aliases: CVE-2010-0001 |
Affected by 1 other vulnerability. |
|
|
VCID-yvpp-2w12-dycv
Aliases: CVE-2022-1271 |
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-z3st-cymz-8kcf
Aliases: CVE-2006-4334 |
Affected by 3 other vulnerabilities. |