PT-2004-1118 · Zlib · Zlib

Mark Adler · Publicado 2004-09-14 · Atualizado 2024-06-15 · CVE-2004-0797

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions zlib versions 1.2.x

Description The issue is related to error handling in the inflate and inflateBack functions of the zlib compression library, which can be exploited by local users to cause a denial of service, resulting in an application crash. The vulnerability is associated with coding errors in the affected functions.

Recommendations For zlib versions 1.2.x, consider disabling the inflate and inflateBack functions as a temporary workaround until a patch is available. Restrict access to these functions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2016-01667

CVE-2004-0797

OPENSUSE-SU-2024:10580-1

Produtos afetados

Zlib

Referências · 35

• https://suse.com/security/cve/CVE-2004-0797 · Nota
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt · Aviso do Fabricante
• http://secunia.com/advisories/11129 · Nota
• http://securityfocus.com/bid/11051 · Nota
• http://xforce.iss.net/xforce/xfdb/17119 · Nota
• http://security.gentoo.org/glsa/glsa-200408-26.xml · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-0160 · Nota
• https://suse.com/security/cve/CVE-2010-5252 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17119 · Nota
• http://marc.theaimsgroup.com/?l=bugtraq&m=109353792914900&w=2 · Nota
• http://osvdb.org/9360 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2004:090 · Aviso do Fabricante
• http://securitytracker.com/id?1011085 · Nota
• https://security-tracker.debian.org/tracker/CVE-2004-0797 · Aviso do Fabricante
• http://osvdb.org/9361 · Nota