Search for packages
Package details: pkg:deb/debian/zlib@1:1.2.8.dfsg-2
purl pkg:deb/debian/zlib@1:1.2.8.dfsg-2
Next non-vulnerable version 1:1.3.dfsg+really1.3.1-1
Latest non-vulnerable version 1:1.3.dfsg+really1.3.1-1
Risk 10.0
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-3dkg-bayv-aaaf
Aliases:
CVE-2016-9842
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
1:1.2.8.dfsg-5
Affected by 2 other vulnerabilities.
VCID-44cr-pxwm-aaaq
Aliases:
CVE-2016-9843
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
1:1.2.8.dfsg-5
Affected by 2 other vulnerabilities.
VCID-6ar6-xb8y-aaap
Aliases:
CVE-2022-37434
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
1:1.2.11.dfsg-1+deb10u1
Affected by 3 other vulnerabilities.
1:1.2.11.dfsg-2
Affected by 2 other vulnerabilities.
1:1.2.11.dfsg-2+deb11u2
Affected by 1 other vulnerability.
VCID-u4ce-pwp5-aaad
Aliases:
CVE-2016-9841
1:1.2.8.dfsg-5
Affected by 2 other vulnerabilities.
VCID-v5mj-f96s-aaas
Aliases:
CVE-2018-25032
GHSA-jc36-42cf-vqwj
1:1.2.11.dfsg-1+deb10u1
Affected by 3 other vulnerabilities.
1:1.2.11.dfsg-2+deb11u2
Affected by 1 other vulnerability.
VCID-yeuu-f11j-aaar
Aliases:
CVE-2016-9840
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
1:1.2.8.dfsg-5
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T18:35:11.732090+00:00 Debian Oval Importer Affected by VCID-yeuu-f11j-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T15:57:13.978642+00:00 Debian Oval Importer Affected by VCID-44cr-pxwm-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:24:12.980057+00:00 Debian Oval Importer Affected by VCID-6ar6-xb8y-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:14:02.229593+00:00 Debian Oval Importer Affected by VCID-yeuu-f11j-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:31:16.757915+00:00 Debian Oval Importer Affected by VCID-3dkg-bayv-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:29:07.670390+00:00 Debian Oval Importer Affected by VCID-u4ce-pwp5-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T11:32:24.469089+00:00 Debian Oval Importer Affected by VCID-v5mj-f96s-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T01:20:20.558502+00:00 Debian Oval Importer Affected by VCID-6ar6-xb8y-aaap None 36.1.3
2025-06-21T00:50:08.933830+00:00 Debian Oval Importer Affected by VCID-3dkg-bayv-aaaf None 36.1.3
2025-06-20T23:45:24.693635+00:00 Debian Oval Importer Affected by VCID-v5mj-f96s-aaas None 36.1.3
2025-06-20T23:35:35.188845+00:00 Debian Oval Importer Affected by VCID-yeuu-f11j-aaar None 36.1.3
2025-06-20T23:16:20.947438+00:00 Debian Oval Importer Affected by VCID-u4ce-pwp5-aaad None 36.1.3
2025-06-20T21:45:05.968811+00:00 Debian Oval Importer Affected by VCID-44cr-pxwm-aaaq None 36.1.3
2025-06-08T13:00:07.528139+00:00 Debian Oval Importer Affected by VCID-6ar6-xb8y-aaap https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T12:54:43.487952+00:00 Debian Oval Importer Affected by VCID-v5mj-f96s-aaas https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:05:33.487520+00:00 Debian Oval Importer Affected by VCID-yeuu-f11j-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T08:50:33.635980+00:00 Debian Oval Importer Affected by VCID-44cr-pxwm-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:18:45.931646+00:00 Debian Oval Importer Affected by VCID-6ar6-xb8y-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:07:23.103142+00:00 Debian Oval Importer Affected by VCID-yeuu-f11j-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T06:25:17.265863+00:00 Debian Oval Importer Affected by VCID-3dkg-bayv-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:29:07.229126+00:00 Debian Oval Importer Affected by VCID-u4ce-pwp5-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T04:52:04.264237+00:00 Debian Oval Importer Affected by VCID-v5mj-f96s-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T18:43:07.463498+00:00 Debian Oval Importer Affected by VCID-6ar6-xb8y-aaap None 36.1.0
2025-06-07T18:12:30.918512+00:00 Debian Oval Importer Affected by VCID-3dkg-bayv-aaaf None 36.1.0
2025-06-07T17:08:17.294505+00:00 Debian Oval Importer Affected by VCID-v5mj-f96s-aaas None 36.1.0
2025-06-07T16:58:32.037974+00:00 Debian Oval Importer Affected by VCID-yeuu-f11j-aaar None 36.1.0
2025-06-07T16:39:26.046915+00:00 Debian Oval Importer Affected by VCID-u4ce-pwp5-aaad None 36.1.0
2025-06-07T15:08:06.398869+00:00 Debian Oval Importer Affected by VCID-44cr-pxwm-aaaq None 36.1.0
2025-04-12T20:05:25.581041+00:00 Debian Oval Importer Affected by VCID-44cr-pxwm-aaaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:37:47.113749+00:00 Debian Oval Importer Affected by VCID-3dkg-bayv-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:37:39.111621+00:00 Debian Oval Importer Affected by VCID-u4ce-pwp5-aaad https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T18:47:29.415352+00:00 Debian Oval Importer Affected by VCID-6ar6-xb8y-aaap https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T18:41:54.840420+00:00 Debian Oval Importer Affected by VCID-v5mj-f96s-aaas https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:48:52.286950+00:00 Debian Oval Importer Affected by VCID-yeuu-f11j-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T07:22:07.850008+00:00 Debian Oval Importer Affected by VCID-44cr-pxwm-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:50:06.948804+00:00 Debian Oval Importer Affected by VCID-6ar6-xb8y-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:40:00.378046+00:00 Debian Oval Importer Affected by VCID-yeuu-f11j-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:57:37.029470+00:00 Debian Oval Importer Affected by VCID-3dkg-bayv-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:00:21.247346+00:00 Debian Oval Importer Affected by VCID-u4ce-pwp5-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:23:14.406859+00:00 Debian Oval Importer Affected by VCID-v5mj-f96s-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T17:20:56.012038+00:00 Debian Oval Importer Affected by VCID-6ar6-xb8y-aaap None 36.0.0
2025-04-07T16:49:53.075929+00:00 Debian Oval Importer Affected by VCID-3dkg-bayv-aaaf None 36.0.0
2025-04-07T15:41:49.729144+00:00 Debian Oval Importer Affected by VCID-v5mj-f96s-aaas None 36.0.0
2025-04-07T15:31:39.843407+00:00 Debian Oval Importer Affected by VCID-yeuu-f11j-aaar None 36.0.0
2025-04-07T15:11:43.979095+00:00 Debian Oval Importer Affected by VCID-u4ce-pwp5-aaad None 36.0.0
2025-04-07T13:39:50.554637+00:00 Debian Oval Importer Affected by VCID-44cr-pxwm-aaaq None 36.0.0