CVE-2006-4338

Опубликовано: 19 сент. 2006

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676
http://docs.info.apple.com/article.html?artnum=304829
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
http://secunia.com/advisories/21996
http://secunia.com/advisories/22002
Patch
Vendor Advisory
http://secunia.com/advisories/22009
Patch
Vendor Advisory
http://secunia.com/advisories/22012
Patch
Vendor Advisory
http://secunia.com/advisories/22017
Patch
Vendor Advisory
http://secunia.com/advisories/22027
http://secunia.com/advisories/22033
Patch
Vendor Advisory
http://secunia.com/advisories/22034
Patch
Vendor Advisory
http://secunia.com/advisories/22043
Patch
Vendor Advisory
http://secunia.com/advisories/22085
http://secunia.com/advisories/22101
http://secunia.com/advisories/22435
http://secunia.com/advisories/22487
http://secunia.com/advisories/22661
http://secunia.com/advisories/23153
http://secunia.com/advisories/23155

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gzip:gzip:1.3.5:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03607

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-4338

ubuntu

почти 20 лет назад

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.

CVE-2006-4338

redhat

почти 20 лет назад

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.

CVE-2006-4338

debian

почти 20 лет назад

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent at ...

GHSA-pr85-6mjj-rj93

github

больше 4 лет назад

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.

EPSS

Процентиль: 88%

0.03607

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other