Summary
Evgeny Legerov discovered that zlib incorrectly handled memory when
performing certain inflate operations. An attacker could use this issue
to cause zlib to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | zlib | 1:1.2.11.dfsg-0ubuntu2.2 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | zlib | 1:1.2.8.dfsg-1ubuntu1.1+esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | zlib | 1:1.2.8.dfsg-2ubuntu4.3+esm2 |
Vulnerabilities 1
-
Critical 9.8
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…
References
-
report
https://ubuntu.com/security/CVE-2022-37434