CVE-2005-2096 zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to....
HighCVSS 7.5
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zlib | = 1.2.0 | No fix listed |
| zlib | = 1.2.1 | No fix listed |
| zlib | = 1.2.2 | No fix listed |
| debian/aide(Debian:12) | < 0.10-6.1.1 | 0.10-6.1.1 |
| debian/aide(Debian:13) | < 0.10-6.1.1 | 0.10-6.1.1 |
| debian/aide(Debian:14) | < 0.10-6.1.1 | 0.10-6.1.1 |
| debian/bacula(Debian:12) | < 1.36.3-2 | 1.36.3-2 |
| debian/bacula(Debian:13) | < 1.36.3-2 | 1.36.3-2 |
| debian/bacula(Debian:14) | < 1.36.3-2 | 1.36.3-2 |
| debian/dpkg(Debian:12) | < 1.13.11 | 1.13.11 |
| debian/dpkg(Debian:13) | < 1.13.11 | 1.13.11 |
| debian/dpkg(Debian:14) | < 1.13.11 | 1.13.11 |
| debian/dump(Debian:12) | < 0.4b40-1 | 0.4b40-1 |
| debian/dump(Debian:13) | < 0.4b40-1 | 0.4b40-1 |
| debian/dump(Debian:14) | < 0.4b40-1 | 0.4b40-1 |
| debian/libphysfs(Debian:12) | < 1.0.0-5 | 1.0.0-5 |
| debian/libphysfs(Debian:13) | < 1.0.0-5 | 1.0.0-5 |
| debian/libphysfs(Debian:14) | < 1.0.0-5 | 1.0.0-5 |
| debian/pvpgn(Debian:12) | < 1.7.8-2 | 1.7.8-2 |
| debian/pvpgn(Debian:12) | = 1.6.4+20040826-1 | No fix listed |
| debian/pvpgn(Debian:12) | = 1.6.4+20040826-2 | No fix listed |
| debian/pvpgn(Debian:12) | = 1.7.7-1 | No fix listed |
| debian/pvpgn(Debian:12) | = 1.7.8-1 | No fix listed |
| debian/pvpgn(Debian:13) | < 1.7.8-2 | 1.7.8-2 |
| debian/pvpgn(Debian:13) | = 1.6.4+20040826-1 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pvpgn(Debian:13) | = 1.6.4+20040826-2 | No fix listed |
| debian/pvpgn(Debian:13) | = 1.7.7-1 | No fix listed |
| debian/pvpgn(Debian:13) | = 1.7.8-1 | No fix listed |
| debian/pvpgn(Debian:14) | < 1.7.8-2 | 1.7.8-2 |
| debian/pvpgn(Debian:14) | = 1.6.4+20040826-1 | No fix listed |
| debian/pvpgn(Debian:14) | = 1.6.4+20040826-2 | No fix listed |
| debian/pvpgn(Debian:14) | = 1.7.7-1 | No fix listed |
| debian/pvpgn(Debian:14) | = 1.7.8-1 | No fix listed |
| debian/rpm(Debian:12) | < 4.0.4-31.1 | 4.0.4-31.1 |
| debian/rpm(Debian:13) | < 4.0.4-31.1 | 4.0.4-31.1 |
| debian/rpm(Debian:14) | < 4.0.4-31.1 | 4.0.4-31.1 |
| debian/sash(Debian:12) | < 3.7-6 | 3.7-6 |
| debian/sash(Debian:13) | < 3.7-6 | 3.7-6 |
| debian/sash(Debian:14) | < 3.7-6 | 3.7-6 |
| debian/texmacs(Debian:13) | < 1:1.0.5-3 | 1:1.0.5-3 |
| debian/texmacs(Debian:14) | < 1:1.0.5-3 | 1:1.0.5-3 |
| debian/zlib(Debian:12) | < 1:1.2.2-7 | 1:1.2.2-7 |
| debian/zlib(Debian:13) | < 1:1.2.2-7 | 1:1.2.2-7 |
| debian/zlib(Debian:14) | < 1:1.2.2-7 | 1:1.2.2-7 |
| debian/zsync(Debian:12) | < 0.4.0-2 | 0.4.0-2 |
| debian/zsync(Debian:13) | < 0.4.0-2 | 0.4.0-2 |
| debian/zsync(Debian:14) | < 0.4.0-2 | 0.4.0-2 |
| Siemens CADRA | < V2511 | V2511 |
References
- APPLE-SA-2008-11-13 vendor-advisory
- APPLE-SA-2005-08-17 vendor-advisory
- APPLE-SA-2005-08-15 vendor-advisory
- 15949 patch third-party-advisory vendor-advisory
- 17054 third-party-advisory
- 17225 third-party-advisory
- 17236 third-party-advisory
- 17326 third-party-advisory
- 17516 third-party-advisory
- 18377 third-party-advisory
- 18406 third-party-advisory
- 18507 third-party-advisory
- 19550 third-party-advisory
- 19597 third-party-advisory
- 24788 third-party-advisory
- 31492 third-party-advisory
- 32706 third-party-advisory
- GLSA-200507-05 patch vendor-advisory
- 1014398 vdb-entry vendor-advisory
- 101989 patch vendor-advisory
- support.apple.com
- support.avaya.com
- DSA-740 patch vendor-advisory
- DSA-797 patch vendor-advisory
- DSA-1026 vendor-advisory
- GLSA-200509-18 patch vendor-advisory
- VU#680620 third-party-advisory us-government-resource
- MDKSA-2005:112 vendor-advisory
- MDKSA-2005:196 vendor-advisory
- MDKSA-2006:070 vendor-advisory
- RHSA-2005:569 patch vendor-advisory
- RHSA-2008:0629 vendor-advisory
- HPSBUX02090 vendor-advisory
- 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates mailing-list
- 20071018 Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) mailing-list
- 20071018 Official Windows binaries of "curl" contain vulnerable zlib 1.2.2 (CAN-2005-2096) mailing-list
- 20071020 Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) mailing-list
- 20071021 Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) mailing-list
- 20071029 Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) mailing-list
- 20071029 Windows binary of "Virtual Floppy Drive 2.1" contains vulnerable zlib (CAN-2005-2096) mailing-list
- 14162 patch vdb-entry
- USN-151-3 vendor-advisory
- www.vmware.com
- www.vmware.com
- ADV-2005-0978 vdb-entry
- ADV-2006-0144 vdb-entry
- ADV-2007-1267 vdb-entry
- bugzilla.redhat.com vendor-advisory
- FLSA:162680 vendor-advisory
- hpux-secure-shell-dos(24064) vdb-entry
- oval:org.mitre.oval:def:11500 signature vdb-entry
- oval:org.mitre.oval:def:1262 signature vdb-entry
- oval:org.mitre.oval:def:1542 signature vdb-entry
- USN-148-1 vendor-advisory
- cert-portal.siemens.com
- Debian Security Tracker CVE-2005-2096 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking