inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large d…

Exploit prediction (EPSS)

4.08% probability of exploitation in the next 30 days, higher than 91% of all scored CVEs.

CVSS scores

References

• exchange.xforce.ibmcloud.com /vulnerabilities/21456 · vdb-entry, x_refsource_XF, x_transferred
• debian.org /security/2006/dsa-1026 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• secunia.com /advisories/19334 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• debian.org /security/2005/dsa-797 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• debian.org /security/2005/dsa-763 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• gentoo.org /security/en/glsa/glsa-200509-18.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2005:196 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• security.debian.org /pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz · x_refsource_MISC, x_transferred
• securityfocus.com /archive/1/464745/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• ubuntulinux.org /usn/usn-151-3 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• gentoo.org /security/en/glsa/glsa-200603-18.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• redhat.com /support/errata/RHSA-2005-584.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• vmware.com /support/vi3/doc/esx-9916286-patch.html · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/16137 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/31492 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• osvdb.org /18141 · vdb-entry, x_refsource_OSVDB, x_transferred
• securitytracker.com /id?1014540 · vdb-entry, x_refsource_SECTRACK, x_transferred
• novell.com /linux/security/advisories/2005_43_zlib.html · vendor-advisory, x_refsource_SUSE, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2006:070 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• redhat.com /support/errata/RHSA-2008-0629.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• vupen.com /english/advisories/2007/1267 · vdb-entry, x_refsource_VUPEN, x_transferred
• vmware.com /support/vi3/doc/esx-3616065-patch.html · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/24788 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/17326 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• lists.apple.com /archives/security-announce/2005/Aug/msg00000.html · vendor-advisory, x_refsource_APPLE, x_transferred
• secunia.com /advisories/17516 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /bid/14340 · vdb-entry, x_refsource_BID, x_transferred
• secunia.com /advisories/19597 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/19550 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/18377 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• lists.apple.com /archives/security-announce/2005//Aug/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
• bugzilla.redhat.com /bugzilla/show_bug.cgi?id=162680 · vendor-advisory, x_refsource_FEDORA, x_transferred

Sources

• CVE List: CVE-2005-1849
• NVD: CVE-2005-1849

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.