gzip

16 results · Feed

• Medium 6.9
  CVE-2026-41992

  Global Buffer Overflow in GNU gzip

  GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across …

  GNU gzip gzip gzip Debian Ubuntu Alpine
  Jun 29, 2026
• Low 2.0
  CVE-2026-41991

  Predictable Temporary File in GNU gzip

  GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID (PID). This …

  GNU gzip gzip gzip Debian Ubuntu Alpine
  Jun 29, 2026
• High 8.8
  CVE-2022-1271

  An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…

  gzip xz-utils xz xz-utils Debian Ubuntu Alpine
  Aug 31, 2022
• Unscored —
  CVE-2010-0001

  Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and pro…

  gzip ncompress Debian
  Jan 29, 2010
• Unscored —
  CVE-2009-2624

  The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which…

  gzip Debian
  Jan 29, 2010
• Unscored —
  CVE-2006-4334

  Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a c…

  gzip Debian
  Sep 19, 2006
• Unscored —
  CVE-2006-4335

  Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running …

  gzip Debian
  Sep 19, 2006
• Unscored —
  CVE-2006-4336

  Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arb…

  gzip Debian
  Sep 19, 2006
• Unscored —
  CVE-2006-4337

  Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to exe…

  gzip Debian
  Sep 19, 2006
• Unscored —
  CVE-2006-4338

  unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite lo…

  gzip Debian
  Sep 19, 2006
• Unscored —
  CVE-2005-0758

  zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands…

  gzip bzip2 Debian
  May 13, 2005
• Unscored —
  CVE-2005-1228

  Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrar…

  gzip Debian
  Apr 22, 2005
• Unscored —
  CVE-2005-0988

  Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permi…

  gzip Debian
  Apr 6, 2005
• Unscored —
  CVE-2004-0970

  The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows…

  gzip Debian
  Oct 20, 2004
• Unscored —
  CVE-2003-0367

  znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.

  gzip Debian
  Jun 10, 2003
• Unscored —
  CVE-1999-1332

  gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a s…

  gzip Debian
  Mar 9, 2002