CVE-2002-2102 InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data.
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jcraft jzlib | = 0.0.1 | No fix listed |
| jcraft jzlib | = 0.0.2 | No fix listed |
| jcraft jzlib | = 0.0.3 | No fix listed |
| jcraft jzlib | = 0.0.4 | No fix listed |
| jcraft jzlib | = 0.0.5 | No fix listed |
| jcraft jzlib | = 0.0.6 | No fix listed |
| debian/jzlib(Debian:12) | < 0.0.7 | 0.0.7 |
| debian/jzlib(Debian:13) | < 0.0.7 | 0.0.7 |
| debian/jzlib(Debian:14) | < 0.0.7 | 0.0.7 |
References
- jzlib-infblocks-dos(8627) vdb-entry
- www.jcraft.com
- 4359 patch vdb-entry
- Debian Security Tracker CVE-2002-2102 vendor-advisory