zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Zlib | — | Apply OS X security update 2005-007 | Dec 16, 2011 | Jul 6, 2005 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 3.2 | Jan 5, 2012 | Jul 6, 2005 |
| Debian | — | Upgrade pvpgnUpgrade zsyncUpgrade dumpUpgrade zlibUpgrade libphysfsUpgrade texmacsUpgrade aideUpgrade rpmUpgrade baculaUpgrade dpkgUpgrade sash | Jul 30, 2024 | Jul 6, 2005 |
| Freebsd | — | Upgrade FreeBSDUpgrade zsync | Dec 10, 2025 | Jul 6, 2005 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade sys-libs/zlib.Upgrade x11-libs/qt.Upgrade perl-core/Compress-Zlib. | Oct 30, 2017 | Jul 6, 2005 |
| Hpux | — | Apply the remediation from HP for CVE-2005-2096 | Aug 11, 2017 | Jul 6, 2005 |
| Suse | — | Upgrade perl-Compress-ZlibUpgrade zlib-32bitUpgrade zlib-64bitUpgrade zlib-devel-64bitUpgrade zlib-x86Upgrade zlib-devel-32bitUpgrade zlibUpgrade zlib-devel | Feb 17, 2015 | Jul 6, 2005 |
| Ubuntu | — | Upgrade amd64-libs-devUpgrade ia32-libs-devUpgrade dpkg-dev | Nov 8, 2024 | Jul 6, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub