CVE-2006-4334 Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference.
MediumCVSS 5.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gzip | = 1.3.5 | No fix listed |
| debian/gzip(Debian:12) | < 1.3.5-15 | 1.3.5-15 |
| debian/gzip(Debian:13) | < 1.3.5-15 | 1.3.5-15 |
| debian/gzip(Debian:14) | < 1.3.5-15 | 1.3.5-15 |
References
- bugzilla.redhat.com
- docs.info.apple.com
- APPLE-SA-2006-11-28 vendor-advisory
- 21996 third-party-advisory
- 22002 third-party-advisory
- 22009 third-party-advisory
- 22012 third-party-advisory
- 22017 third-party-advisory
- 22027 third-party-advisory
- 22033 third-party-advisory
- 22034 third-party-advisory
- 22043 third-party-advisory
- 22085 third-party-advisory
- 22101 third-party-advisory
- 22435 third-party-advisory
- 22487 third-party-advisory
- 22661 third-party-advisory
- 23155 third-party-advisory
- 23679 third-party-advisory
- 24435 third-party-advisory
- 24636 third-party-advisory
- FreeBSD-SA-06:21 vendor-advisory
- GLSA-200609-13 vendor-advisory
- 1016883 vdb-entry
- SSA:2006-262 vendor-advisory
- 102766 vendor-advisory
- support.avaya.com
- VU#933712 third-party-advisory us-government-resource
- MDKSA-2006:167 vendor-advisory
- SUSE-SA:2006:056 vendor-advisory
- OpenPKG-SA-2006.020 vendor-advisory
- RHSA-2006:0667 vendor-advisory
- 20060919 rPSA-2006-0170-1 gzip mailing-list
- HPSBTU02168 vendor-advisory
- FLSA:211760 vendor-advisory
- HPSBUX02195 vendor-advisory
- 20070330 VMSA-2007-0002 VMware ESX security updates mailing-list
- 20101 vdb-entry
- 2006-0052 vendor-advisory
- USN-349-1 vendor-advisory
- TA06-333A third-party-advisory us-government-resource
- DSA-1181 vendor-advisory
- www.vmware.com
- ADV-2006-4275 vdb-entry
- ADV-2006-4750 vdb-entry
- ADV-2007-0092 vdb-entry
- ADV-2007-0832 vdb-entry
- ADV-2007-1171 vdb-entry
- gzip-huftbuild-code-execution(29038) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10527 signature vdb-entry
- Debian Security Tracker CVE-2006-4334 vendor-advisory