Skip to content
OpenAdvisories
Unscored RHSA-2006:0667 5 CVEs

Red Hat Security Advisory: gzip security update

Published Sep 15, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as gzip 0:1.3.3-13.rhel3
Red Hat · RHEL 3 enterprise_linux:3::as gzip-debuginfo 0:1.3.3-13.rhel3
Red Hat · RHEL 3 enterprise_linux:3::desktop gzip 0:1.3.3-13.rhel3
Red Hat · RHEL 3 enterprise_linux:3::desktop gzip-debuginfo 0:1.3.3-13.rhel3
Red Hat · RHEL 3 enterprise_linux:3::es gzip 0:1.3.3-13.rhel3
Red Hat · RHEL 3 enterprise_linux:3::es gzip-debuginfo 0:1.3.3-13.rhel3
Red Hat · RHEL 3 enterprise_linux:3::ws gzip 0:1.3.3-13.rhel3
Red Hat · RHEL 3 enterprise_linux:3::ws gzip-debuginfo 0:1.3.3-13.rhel3
Red Hat · RHEL 4 enterprise_linux:4::as gzip 0:1.3.3-16.rhel4
Red Hat · RHEL 4 enterprise_linux:4::as gzip-debuginfo 0:1.3.3-16.rhel4
Red Hat · RHEL 4 enterprise_linux:4::desktop gzip 0:1.3.3-16.rhel4
Red Hat · RHEL 4 enterprise_linux:4::desktop gzip-debuginfo 0:1.3.3-16.rhel4
Red Hat · RHEL 4 enterprise_linux:4::es gzip 0:1.3.3-16.rhel4
Red Hat · RHEL 4 enterprise_linux:4::es gzip-debuginfo 0:1.3.3-16.rhel4
Red Hat · RHEL 4 enterprise_linux:4::ws gzip 0:1.3.3-16.rhel4
Red Hat · RHEL 4 enterprise_linux:4::ws gzip-debuginfo 0:1.3.3-16.rhel4

Vulnerabilities 5

  • Unscored —
    CVE-2006-4334

    Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a c…

    gzip Debian
  • Unscored —
    CVE-2006-4335

    Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running …

    gzip Debian
  • Unscored —
    CVE-2006-4336

    Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arb…

    gzip Debian
  • Unscored —
    CVE-2006-4337

    Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to exe…

    gzip Debian
  • Unscored —
    CVE-2006-4338

    unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite lo…

    gzip Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=204676
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0667.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-4334
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618181
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4334
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4334
  • report
    https://access.redhat.com/security/cve/CVE-2006-4335
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=220595
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4335
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4335
  • report
    https://access.redhat.com/security/cve/CVE-2006-4336
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4336
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4336
  • report
    https://access.redhat.com/security/cve/CVE-2006-4337
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4337
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4337
  • report
    https://access.redhat.com/security/cve/CVE-2006-4338
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618182
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4338
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4338