Lucene search
AlmaLinuxALSA-2022:7314HistoryNov 02, 2022 - 12:00 a.m.
Moderate: zlib security update
2022-11-0200:00:00
errata.almalinux.org
22
zlib
security update
heap-based buffer over-read
inflate
cve-2022-37434
unix
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
71.6%
The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.
Security Fix(es):
- zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | ppc64le | zlib-devel | < 1.2.11-32.el9_0 | zlib-devel-1.2.11-32.el9_0.ppc64le.rpm |
| almalinux | 9 | aarch64 | zlib-devel | < 1.2.11-32.el9_0 | zlib-devel-1.2.11-32.el9_0.aarch64.rpm |
| almalinux | 9 | s390x | zlib-devel | < 1.2.11-32.el9_0 | zlib-devel-1.2.11-32.el9_0.s390x.rpm |
| almalinux | 9 | i686 | zlib-devel | < 1.2.11-32.el9_0 | zlib-devel-1.2.11-32.el9_0.i686.rpm |
| almalinux | 9 | ppc64le | zlib | < 1.2.11-32.el9_0 | zlib-1.2.11-32.el9_0.ppc64le.rpm |
| almalinux | 9 | x86_64 | zlib | < 1.2.11-32.el9_0 | zlib-1.2.11-32.el9_0.x86_64.rpm |
| almalinux | 9 | aarch64 | zlib | < 1.2.11-32.el9_0 | zlib-1.2.11-32.el9_0.aarch64.rpm |
| almalinux | 9 | s390x | zlib | < 1.2.11-32.el9_0 | zlib-1.2.11-32.el9_0.s390x.rpm |
| almalinux | 9 | i686 | zlib-static | < 1.2.11-32.el9_0 | zlib-static-1.2.11-32.el9_0.i686.rpm |
| almalinux | 9 | s390x | zlib-static | < 1.2.11-32.el9_0 | zlib-static-1.2.11-32.el9_0.s390x.rpm |
Related
nessus
nessus
SUSE SLES12 Security Update : zlib (SUSE-SU-2022:2846-1)
2022-08-20 00:00:00
Rocky Linux 8 : zlib (RLSA-2022:7106)
2022-11-17 00:00:00
Rocky Linux 9 : zlib (RLSA-2022:7314)
2023-11-07 00:00:00
debian
debian
[SECURITY] [DSA 5218-1] zlib security update
2022-08-25 19:51:59
[SECURITY] [DLA 3103-1] zlib security update
2022-09-12 09:00:53
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:2845-1)
2022-08-19 00:00:00
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2022-2673)
2022-11-03 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2846-1)
2022-08-19 00:00:00
cloudlinux
cloudlinux
Fixed CVE-2022-37434 in zlib
2022-08-17 18:47:33
Fixed CVE-2022-37434 in rsync
2022-08-25 15:56:39
osv
osv
Moderate: rsync security and enhancement update
2022-11-08 06:29:11
Moderate: rsync security and bug fix update
2022-11-15 06:20:39
CVE-2022-37434
2022-08-05 07:15:07
oraclelinux
oraclelinux
zlib security update
2022-11-02 00:00:00
zlib security update
2022-11-09 00:00:00
zlib security update
2022-10-26 00:00:00
f5
f5
K67213091 : Zlib vulnerability CVE-2022-37434
2022-10-21 00:00:00
ibm
ibm
rocky
rocky
zlib security update
2022-10-25 07:22:56
zlib security update
2022-11-02 13:50:56
rsync security and enhancement update
2022-11-08 06:29:11
almalinux
almalinux
Moderate: rsync security and bug fix update
2022-11-15 00:00:00
Moderate: rsync security and enhancement update
2022-11-08 00:00:00
Moderate: zlib security update
2022-10-25 00:00:00
cloudfoundry
cloudfoundry
USN-5570-1: zlib vulnerability | Cloud Foundry
2023-01-19 00:00:00
USN-5573-1: rsync vulnerability | Cloud Foundry
2023-01-19 00:00:00
USN-5573-1: rsync vulnerability | Cloud Foundry
2022-08-25 00:00:00
ubuntu
ubuntu
zlib vulnerability
2022-10-17 00:00:00
rsync vulnerability
2022-08-18 00:00:00
zlib vulnerability
2022-08-17 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-08-09 02:04:05
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Zlib
2022-09-30 10:20:36
Exploit for Out-of-bounds Write in Zlib
2022-09-14 07:28:23
Exploit for Out-of-bounds Write in Zlib
2024-02-02 14:25:28
debiancve
debiancve
CVE-2022-37434
2022-08-05 07:15:07
rosalinux
rosalinux
Advisory ROSA-SA-2023-2131
2023-03-14 14:13:27
amazon
amazon
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:13.zlib
2022-08-30 00:00:00
freebsd
freebsd
FreeBSD -- zlib heap buffer overflow
2022-08-30 00:00:00
redhat
redhat
(RHSA-2022:7106) Moderate: zlib security update
2022-10-25 07:22:56
(RHSA-2024:0254) Moderate: rsync security update
2024-01-15 15:28:49
(RHSA-2022:8291) Moderate: rsync security and bug fix update
2022-11-15 06:20:39
qt
qt
Security advisory: zlib in Qt
2022-09-12 00:00:00
centos
centos
minizip, zlib security update
2023-03-08 16:30:28
wolfi
wolfi
CVE-2022-37434 vulnerabilities
2024-10-01 09:27:37
fedora
fedora
[SECURITY] Fedora 37 Update: zlib-1.2.12-5.fc37
2022-09-14 00:23:02
[SECURITY] Fedora 36 Update: zlib-1.2.11-33.fc36
2022-09-02 09:55:06
[SECURITY] Fedora 35 Update: zlib-1.2.11-32.fc35
2022-09-16 01:46:40
photon
photon
Critical Photon OS Security Update - PHSA-2022-0236
2022-08-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-37434 affecting package zlib for versions less than 1.2.12-2
2022-09-13 22:36:39
CVE-2022-37434 affecting package crash for versions less than 8.0.4-2
2024-06-21 09:32:44
CVE-2022-37434 affecting package zlib 1.2.12-1
2022-08-24 22:05:05
slackware
slackware
[slackware-security] zlib
2022-10-15 20:38:53
redos
redos
ROS-20221207-01
2022-12-07 00:00:00
suse
suse
Security update for zlib (important)
2022-09-01 00:00:00
Security update for zlib (important)
2022-08-31 00:00:00
cgr
cgr
CVE-2022-37434 vulnerabilities
2024-05-19 03:07:16
alpinelinux
alpinelinux
CVE-2022-37434
2022-08-05 07:15:07
mageia
mageia
Updated zlib packages fix security vulnerability
2022-09-16 22:39:55
redhatcve
redhatcve
CVE-2022-37434
2022-08-09 06:36:51
cvelist
cvelist
CVE-2022-37434
2022-08-05 00:00:00
aix
aix
AIX is vulnerable to denial of service due to zlib and zlibNX
2023-07-25 11:05:17
prion
prion
Heap overflow
2022-08-05 07:15:00
ubuntucve
ubuntucve
CVE-2022-37434
2022-08-05 00:00:00
nvd
nvd
CVE-2022-37434
2022-08-05 07:15:07
cve
cve
CVE-2022-37434
2022-08-05 07:15:07
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
71.6%
Related for ALSA-2022:7314