Skip to content
OpenAdvisories

Package · Alpine

gzip

3 known vulnerabilities.

3 results · Feed

  • Medium 6.9

    Global Buffer Overflow in GNU gzip

    GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across …

  • Low 2.0

    Predictable Temporary File in GNU gzip

    GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID (PID). This …

  • High 8.8

    An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…