Search for packages
Package details: pkg:alpm/archlinux/zlib@1:1.2.12-2
purl pkg:alpm/archlinux/zlib@1:1.2.12-2
Next non-vulnerable version 1:1.2.12-3
Latest non-vulnerable version 1:1.2.12-3
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-6ar6-xb8y-aaap
Aliases:
CVE-2022-37434
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
1:1.2.12-3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:45:15.050150+00:00 Arch Linux Importer Affected by VCID-6ar6-xb8y-aaap https://security.archlinux.org/AVG-2821 36.0.0
2024-09-18T02:00:11.018626+00:00 Arch Linux Importer Affected by VCID-6ar6-xb8y-aaap https://security.archlinux.org/AVG-2821 34.0.1
2024-01-03T22:26:25.489576+00:00 Arch Linux Importer Affected by VCID-6ar6-xb8y-aaap https://security.archlinux.org/AVG-2821 34.0.0rc1