Skip to content
OpenAdvisories

Product · ruby

zlib

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 1.7

    zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption

    zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes…