Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2022-7106

Опубликовано: 26 окт. 2022
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2022-7106: zlib security update (MODERATE)

[1.2.11.19]

  • Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  • Resolves: CVE-2022-37434

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

zlib

1.2.11-19.el8_6

zlib-devel

1.2.11-19.el8_6

zlib-static

1.2.11-19.el8_6

Oracle Linux x86_64

zlib

1.2.11-19.el8_6

zlib-devel

1.2.11-19.el8_6

zlib-static

1.2.11-19.el8_6

Связанные CVE

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 3 года назад

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

CVSS3: 7
redhat
почти 3 года назад

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

CVSS3: 9.8
nvd
почти 3 года назад

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

CVSS3: 9.8
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 9.8
debian
почти 3 года назад

zlib through 1.2.12 has a heap-based buffer over-read or buffer overfl ...