CVE-2005-1849 inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
MediumCVSS 5.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zlib | = 1.2.2 | No fix listed |
| debian/sash(Debian:12) | < 3.7-5sarge1 | 3.7-5sarge1 |
| debian/sash(Debian:13) | < 3.7-5sarge1 | 3.7-5sarge1 |
| debian/sash(Debian:14) | < 3.7-5sarge1 | 3.7-5sarge1 |
| debian/zlib(Debian:12) | < 1:1.2.3-1 | 1:1.2.3-1 |
| debian/zlib(Debian:13) | < 1:1.2.3-1 | 1:1.2.3-1 |
| debian/zlib(Debian:14) | < 1:1.2.3-1 | 1:1.2.3-1 |
| debian/zsync(Debian:12) | < 0.4.1-1 | 0.4.1-1 |
| debian/zsync(Debian:13) | < 0.4.1-1 | 0.4.1-1 |
| debian/zsync(Debian:14) | < 0.4.1-1 | 0.4.1-1 |
References
- APPLE-SA-2005-08-17 vendor-advisory
- APPLE-SA-2005-08-15 vendor-advisory
- 16137 third-party-advisory vendor-advisory
- 17326 third-party-advisory vendor-advisory
- 17516 third-party-advisory vendor-advisory
- 18377 third-party-advisory vendor-advisory
- 19334 third-party-advisory vendor-advisory
- 19550 third-party-advisory vendor-advisory
- 19597 third-party-advisory vendor-advisory
- 24788 third-party-advisory vendor-advisory
- 31492 third-party-advisory vendor-advisory
- security.debian.org
- 1014540 vdb-entry
- DSA-763 patch vendor-advisory
- DSA-797 vendor-advisory
- DSA-1026 vendor-advisory
- GLSA-200509-18 vendor-advisory
- GLSA-200603-18 vendor-advisory
- MDKSA-2005:196 vendor-advisory
- MDKSA-2006:070 vendor-advisory
- SUSE-SA:2005:043 vendor-advisory
- 18141 vdb-entry
- RHSA-2005:584 vendor-advisory
- RHSA-2008:0629 vendor-advisory
- 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates mailing-list
- 14340 vdb-entry
- USN-151-3 vendor-advisory
- www.vmware.com
- www.vmware.com
- ADV-2007-1267 vdb-entry
- FLSA:162680 vendor-advisory
- zlib-codetable-dos(21456) vdb-entry
- oval:org.mitre.oval:def:11402 signature vdb-entry
- Debian Security Tracker CVE-2005-1849 vendor-advisory