CVE-2004-0797 The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).
LowCVSS 2.1
EPSS 0.47%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zlib | = 1.2.1 | No fix listed |
| debian/zlib(Debian:12) | < 1:1.2.1.1-6 | 1:1.2.1.1-6 |
| debian/zlib(Debian:13) | < 1:1.2.1.1-6 | 1:1.2.1.1-6 |
| debian/zlib(Debian:14) | < 1:1.2.1.1-6 | 1:1.2.1.1-6 |
References
- bugs.debian.org
- CLA-2004:865 vendor-advisory
- CLA-2004:878 vendor-advisory
- 20040825 [OpenPKG-SA-2004.038] OpenPKG Security Advisory (zlib) mailing-list
- 11129 third-party-advisory
- 17054 third-party-advisory
- 18377 third-party-advisory
- GLSA-200408-26 vendor-advisory
- 1011085 vdb-entry
- VU#238678 third-party-advisory us-government-resource
- MDKSA-2004:090 vendor-advisory
- SUSE-SA:2004:029 vendor-advisory
- 9360 vdb-entry
- 9361 vdb-entry
- 11051 vdb-entry
- SSA:2004-278 vendor-advisory
- FLSA:2043 vendor-advisory
- zlib-inflate-inflateback-dos(17119) vdb-entry
- Debian Security Tracker CVE-2004-0797 vendor-advisory