Skip to content
OpenAdvisories
Unscored DSA-1974-1 3 CVEs

gzip - arbitrary code execution

Published Jan 20, 2010 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 gzip 1.3.5-15+etch1
Debian · 5.0 gzip 1.3.12-6+lenny1

Vulnerabilities 3

  • Unscored —

    Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a c…

  • Unscored —

    The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which…

  • Unscored —

    Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and pro…