PT-2004-1118 · Zlib · Zlib

Mark Adler · Published 2004-09-14 · Updated 2024-06-15 · CVE-2004-0797

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions zlib versions 1.2.x

Description The issue is related to error handling in the inflate and inflateBack functions of the zlib compression library, which can be exploited by local users to cause a denial of service, resulting in an application crash. The vulnerability is associated with coding errors in the affected functions.

Recommendations For zlib versions 1.2.x, consider disabling the inflate and inflateBack functions as a temporary workaround until a patch is available. Restrict access to these functions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-01667

CVE-2004-0797

OPENSUSE-SU-2024:10580-1

Affected Products

Zlib

References · 35

• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200408-26.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2004:090 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0797 · Vendor Advisory
• https://bugzilla.fedora.us/show_bug.cgi?id=2043 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0797 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000878 · Vendor Advisory
• http://novell.com/linux/security/advisories/2004_29_zlib.html · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.17/SCOSA-2004.17.txt · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0797 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.319160 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01667 · Security Note
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000865 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0797 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10580-1 · Vendor Advisory