10 results · Feed
-
High 7.4
zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzv…
-
Critical 9.8
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…
-
High 7.5
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
-
Unscored —
An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result in an integer overflo…
-
Unscored —
An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit system…
-
Unscored —
An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer der…
-
Unscored —
An issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in an integer overflow and…
-
Unscored —
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via …
-
Unscored —
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper poin…
-
Unscored —
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper point…