Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2022-7314

Опубликовано: 02 нояб. 2022
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2022-7314: zlib security update (MODERATE)

[1.2.11-32]

  • Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  • Resolves: CVE-2022-37434

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

zlib

1.2.11-32.el9_0

zlib-devel

1.2.11-32.el9_0

zlib-static

1.2.11-32.el9_0

Oracle Linux x86_64

zlib

1.2.11-32.el9_0

zlib-devel

1.2.11-32.el9_0

zlib-static

1.2.11-32.el9_0

Связанные CVE

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 3 года назад

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

CVSS3: 7
redhat
почти 3 года назад

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

CVSS3: 9.8
nvd
почти 3 года назад

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

CVSS3: 9.8
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 9.8
debian
почти 3 года назад

zlib through 1.2.12 has a heap-based buffer over-read or buffer overfl ...