Search for packages
purl | pkg:deb/debian/zlib@1:1.2.11.dfsg-2%2Bdeb11u1 |
Tags | Ghost |
Next non-vulnerable version | 1:1.3.dfsg+really1.3.1-1 |
Latest non-vulnerable version | 1:1.3.dfsg+really1.3.1-1 |
Risk | 10.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-6ar6-xb8y-aaap
Aliases: CVE-2022-37434 |
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference). |
Affected by 1 other vulnerability. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |
Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
---|