Search for packages
purl | pkg:alpm/archlinux/zlib@1:1.2.12-2 |
Next non-vulnerable version | 1:1.2.12-3 |
Latest non-vulnerable version | 1:1.2.12-3 |
Risk | 10.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-6ar6-xb8y-aaap
Aliases: CVE-2022-37434 |
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference). |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |
Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
---|---|---|---|---|---|
2025-03-28T07:45:15.050150+00:00 | Arch Linux Importer | Affected by | VCID-6ar6-xb8y-aaap | https://security.archlinux.org/AVG-2821 | 36.0.0 |
2024-09-18T02:00:11.018626+00:00 | Arch Linux Importer | Affected by | VCID-6ar6-xb8y-aaap | https://security.archlinux.org/AVG-2821 | 34.0.1 |
2024-01-03T22:26:25.489576+00:00 | Arch Linux Importer | Affected by | VCID-6ar6-xb8y-aaap | https://security.archlinux.org/AVG-2821 | 34.0.0rc1 |