Description
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.openwall.com/lists/oss-security/2022/03/24/1 ↗
- https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531 ↗
- http://www.openwall.com/lists/oss-security/2022/03/25/2 ↗
- http://www.openwall.com/lists/oss-security/2022/03/26/1 ↗
- https://www.debian.org/security/2022/dsa-5111 ↗
- https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/ ↗
- https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html ↗
- http://seclists.org/fulldisclosure/2022/May/33 ↗
- http://seclists.org/fulldisclosure/2022/May/35 ↗
- http://seclists.org/fulldisclosure/2022/May/38 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/ ↗
- https://www.oracle.com/security-alerts/cpujul2022.html ↗
- https://www.openwall.com/lists/oss-security/2022/03/28/3 ↗
- https://www.openwall.com/lists/oss-security/2022/03/28/1 ↗
- https://github.com/madler/zlib/compare/v1.2.11...v1.2.12 ↗
- https://github.com/madler/zlib/issues/605 ↗
- https://support.apple.com/kb/HT213257 ↗
- https://support.apple.com/kb/HT213256 ↗
- https://support.apple.com/kb/HT213255 ↗
- https://security.netapp.com/advisory/ntap-20220526-0009/ ↗
- https://security.netapp.com/advisory/ntap-20220729-0004/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/ ↗
- https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html ↗
- https://security.gentoo.org/glsa/202210-42 ↗
- https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf ↗
- https://cert-portal.siemens.com/productcert/html/ssa-333517.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-419740.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-565386.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-942865.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-470355.html ↗