zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | libz-mingw-w64 | <Â 1.2.12+dfsg-2 | libz-mingw-w64_1.2.12+dfsg-2_all.deb |
Debian | 11 | all | libz-mingw-w64 | <=Â 1.2.11+dfsg-2 | libz-mingw-w64_1.2.11+dfsg-2_all.deb |
Debian | 10 | all | libz-mingw-w64 | <=Â 1.2.11+dfsg-2 | libz-mingw-w64_1.2.11+dfsg-2_all.deb |
Debian | 999 | all | libz-mingw-w64 | <Â 1.2.12+dfsg-2 | libz-mingw-w64_1.2.12+dfsg-2_all.deb |
Debian | 13 | all | libz-mingw-w64 | <Â 1.2.12+dfsg-2 | libz-mingw-w64_1.2.12+dfsg-2_all.deb |
Debian | 12 | all | zlib | <Â 1:1.2.11.dfsg-4.1 | zlib_1:1.2.11.dfsg-4.1_all.deb |
Debian | 11 | all | zlib | <Â 1:1.2.11.dfsg-2+deb11u2 | zlib_1:1.2.11.dfsg-2+deb11u2_all.deb |
Debian | 10 | all | zlib | <Â 1:1.2.11.dfsg-1+deb10u2 | zlib_1:1.2.11.dfsg-1+deb10u2_all.deb |
Debian | 999 | all | zlib | <Â 1:1.2.11.dfsg-4.1 | zlib_1:1.2.11.dfsg-4.1_all.deb |
Debian | 13 | all | zlib | <Â 1:1.2.11.dfsg-4.1 | zlib_1:1.2.11.dfsg-4.1_all.deb |