Veracode Vulnerability DatabaseVERACODE:18038Denial Of Service (DoS)
0.013 Low
EPSS
Percentile
86.2%
zlib is vulnerable to denial of service attacks. A remote user is able to cause an application crash resulting in denial of service conditions. The vulnerability affects the function inflateMark in the library zlib of the file inflate.c.
References
lists.opensuse.org/opensuse-updates/2016-12/msg00127.html
lists.opensuse.org/opensuse-updates/2017-01/msg00050.html
lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
www.openwall.com/lists/oss-security/2016/12/05/21
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
www.securityfocus.com/bid/95131
www.securitytracker.com/id/1039427
access.redhat.com/errata/RHSA-2017:1220
access.redhat.com/errata/RHSA-2017:1221
access.redhat.com/errata/RHSA-2017:1222
access.redhat.com/errata/RHSA-2017:2999
access.redhat.com/errata/RHSA-2017:3046
access.redhat.com/errata/RHSA-2017:3047
access.redhat.com/errata/RHSA-2017:3453
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1402348
developer.ibm.com/javasdk/support/security-vulnerabilities/
github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958
lists.debian.org/debian-lts-announce/2019/03/msg00027.html
lists.debian.org/debian-lts-announce/2020/01/msg00030.html
security.gentoo.org/glsa/201701-56
security.gentoo.org/glsa/202007-54
support.apple.com/HT208112
support.apple.com/HT208113
support.apple.com/HT208115
support.apple.com/HT208144
usn.ubuntu.com/4246-1/
usn.ubuntu.com/4292-1/
wiki.mozilla.org/images/0/09/Zlib-report.pdf
wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib
www.oracle.com/security-alerts/cpujul2020.html
Related
