Description
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | sash | 3.7-5sarge1 | — |
| Debian 14 | zlib | 1:1.2.3-1 | — |
| Debian 14 | zsync | 0.4.1-1 | — |
| Debian 13 | sash | 3.7-5sarge1 | — |
| Debian 13 | zlib | 1:1.2.3-1 | — |
| Debian 13 | zsync | 0.4.1-1 | — |
| Debian 12 | sash | 3.7-5sarge1 | — |
| Debian 12 | zlib | 1:1.2.3-1 | — |
| Debian 12 | zsync | 0.4.1-1 | — |
| Debian 3.1 | sash | 3.7-5sarge1 | DSA-1026-1 |
| Debian 3.1 | zlib | 1:1.2.2-4.sarge.2 | DSA-763-1 |
| Debian 3.1 | zsync | 0.3.3-1.sarge.1 | DSA-797-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | zlib +1 | 1.2.1.2-1.2 | RHSA-2005:584 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | rhn-solaris-bootstrap | 5.0.2-3 | RHSA-2008:0629, RHSA-2008:0264 |
| Red Hat Network Satellite 5 | rhn_solaris_bootstrap_5_0_2_3 +1 | 1-0 | RHSA-2008:0629, RHSA-2008:0264 |
| Red Hat Network Satellite 4 | rhn-solaris-bootstrap | 5.0.2-3 | RHSA-2008:0525 |
| Red Hat Network Satellite 4 | rhn_solaris_bootstrap_5_0_2_3 | 1-0 | RHSA-2008:0525 |
Advisories 7
- RHSA-2005:584 Red Hat Security Advisory: zlib security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-797-1 zsync - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-763-1 zlib - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1026-1 sash - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2008:0629 Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update Red Hat Security Advisories (RHSA) · Jan 14, 2026
- RHSA-2008:0525 Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update Red Hat Security Advisories (RHSA) · Jan 14, 2026
- RHSA-2008:0264 Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update Red Hat Security Advisories (RHSA) · Jan 14, 2026
References
- zlib-codetable-dos(21456) vdb-entry
- DSA-1026 vendor-advisory
- 19334 third-party-advisory
- DSA-797 vendor-advisory
- DSA-763 vendor-advisory
- GLSA-200509-18 vendor-advisory
- MDKSA-2005:196 vendor-advisory
- http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz
- 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates mailing-list
- USN-151-3 vendor-advisory
- GLSA-200603-18 vendor-advisory
- RHSA-2005:584 vendor-advisory
- http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html
- 16137 third-party-advisory
- 31492 third-party-advisory
- oval:org.mitre.oval:def:11402 vdb-entry signature
- 18141 vdb-entry
- 1014540 vdb-entry
- SUSE-SA:2005:043 vendor-advisory
- MDKSA-2006:070 vendor-advisory
- RHSA-2008:0629 vendor-advisory
- ADV-2007-1267 vdb-entry
- http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html
- 24788 third-party-advisory
- 17326 third-party-advisory
- APPLE-SA-2005-08-15 vendor-advisory
- 17516 third-party-advisory
- 14340 vdb-entry
- 19597 third-party-advisory
- 19550 third-party-advisory
- 18377 third-party-advisory
- APPLE-SA-2005-08-17 vendor-advisory
- FLSA:162680 vendor-advisory