zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rsync-daemonUpgrade rsyncUpgrade zlib-staticUpgrade zlibUpgrade mingw64-zlib-staticUpgrade mingw32-zlibUpgrade zlib-develUpgrade mingw64-zlibUpgrade mingw32-zlib-static | May 4, 2022 | Mar 25, 2022 |
| Alpine Linux | — | Upgrade mariadbUpgrade ruby-nokogiriUpgrade zlibUpgrade minizip | Mar 26, 2024 | Mar 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade zlib-develUpgrade minizipUpgrade zlib-debuginfoUpgrade zlib-staticUpgrade zlibUpgrade minizip-devel | Jul 4, 2022 | Mar 25, 2022 |
| Amazon_linux | — | Upgrade zlibUpgrade rsync | Jul 8, 2022 | Mar 25, 2022 |
| Amazon_linux_2023 | — | Upgrade zlib-staticUpgrade zlib-debugsourceUpgrade rsync-debugsourceUpgrade rsync-debuginfoUpgrade zlib-develUpgrade minizip-compat-develUpgrade minizip-compat-debuginfoUpgrade minizip-compatUpgrade zlib-debuginfoUpgrade zlibUpgrade rsync-daemonUpgrade rsync | Feb 17, 2025 | Apr 20, 2018 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Apache | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Appkit | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Appleevents | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Applegraphicscontrol | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Applescript | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Bluetooth | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Contacts | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Coretypes | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Cvms | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Driverkit | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Facetime | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Graphicsdrivers | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Intelgraphicsdriver | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Iokit | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Iomobileframebuffer | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Launchservices | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Libinfo | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Libresolv | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Libressl | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Libxml2 | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Loginwindow | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Openssl | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Packagekit | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Photobooth | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Preview | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Printing | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Safariprivatebrowsing | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Security | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Smb | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Softwareupdate | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Spotlight | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Systempreferences | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Tcc | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Tcl | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Terminal | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Vim | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Webkit | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Webrtc | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Wifi | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Zip | — | — | Oct 14, 2024 | Mar 25, 2022 |
| Apple Osx Zlib | — | Apply OS X security update 2022-004 CatalinaUpgrade macOS to the latest version | May 17, 2022 | Mar 25, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2022 |
| Autodesk Autocad | — | Update Autodesk AutoCAD to the latest version for Windows and macOS. | Jul 22, 2025 | Sep 23, 2022 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 11 installer 11.55 (JDK 11.0.14.1.101+4, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 17 installer 17.33 (JDK 17.0.2.0.101+1, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 7 installer 7.53 (JDK 7u341-b03, quarterly CPU) — Azul Legacy Production SupportApply legacy security update: Azul Zulu JDK 6 installer 6.47 (JDK 6b147, quarterly CPU) — Azul Legacy Production SupportApply Azul Zulu JDK 15 installer 15.39 (JDK 15.0.6.0.101+3, quarterly CPU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 8 installer 8.61 (JDK 8u331-b04, quarterly CPU) (LTS stream)Apply Azul Zulu JDK 13 installer 13.47 (JDK 13.0.10.0.101+3, quarterly CPU) (short-term support); migrate to JDK 17 (LTS) | Jun 7, 2022 | Mar 25, 2022 |
| Centos_linux | — | Upgrade minizip-compat-debuginfoUpgrade zlib-debugsourceUpgrade rsync-debuginfoUpgrade rsyncUpgrade minizip-develUpgrade rsync-daemonUpgrade rsync-debugsourceUpgrade zlib-staticUpgrade minizipUpgrade zlib-debuginfoUpgrade zlibUpgrade zlib-devel | Apr 29, 2022 | Mar 25, 2022 |
| Debian | — | Upgrade libz-mingw-w64Upgrade zlib | Apr 4, 2022 | Mar 25, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 19, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mysql-server56Upgrade mariadb105-serverUpgrade mariadb103-serverUpgrade mariadb106-serverUpgrade mysql-server57Upgrade mysql-server80Upgrade mysql-client80Upgrade FreeBSD | Nov 4, 2022 | Aug 25, 2022 |
| Gentoo Linux | — | Upgrade net-misc/rsync.Upgrade sys-libs/zlib. | Nov 1, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rsync | Aug 2, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rsync | Mar 8, 2023 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade zlibUpgrade zlib-devel | May 25, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade zlibUpgrade zlib-devel | Jun 17, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade zlibUpgrade zlib-devel | Jun 22, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rsync | Jul 11, 2022 | Mar 25, 2022 |
| Ibm Aix | — | Apply the fix or workaround for zlib_advisory | Oct 12, 2022 | Mar 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Mar 25, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle Missing Cpu Jan 2023 | — | Apply the January 2023 Critical Patch Update (CPU) for Oracle Database | Jan 17, 2023 | Mar 25, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 5.7.39Upgrade to MySQL version 8.0.30 | Jun 15, 2026 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade zlibUpgrade mingw32-zlib-staticUpgrade mingw64-zlibUpgrade rsync-daemonUpgrade mingw64-zlib-staticUpgrade minizip-develUpgrade minizipUpgrade rsyncUpgrade mingw32-zlibUpgrade zlib-staticUpgrade zlib-devel | Apr 29, 2022 | Apr 20, 2018 |
| Redhat_linux | — | Upgrade rsync-debugsourceUpgrade rsyncUpgrade mingw32-zlibUpgrade mingw64-zlib-debuginfoUpgrade mingw32-zlib-staticUpgrade minizipUpgrade zlib-debuginfoUpgrade mingw64-zlib-staticUpgrade rsync-daemonUpgrade rsync-debuginfoUpgrade minizip-develUpgrade mingw32-zlib-debuginfoUpgrade zlib-staticUpgrade minizip-compat-debuginfoUpgrade mingw64-zlibUpgrade zlib-debugsourceUpgrade zlibUpgrade zlib-devel | Apr 29, 2022 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade zlib-staticUpgrade rsyncUpgrade zlib-develUpgrade zlib-debugsourceUpgrade rsync-debuginfoUpgrade rsync-debugsourceUpgrade zlib-debuginfoUpgrade zlib | Mar 5, 2024 | Mar 25, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Universal Forwarder to version 9.0.5Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Universal Forwarder to version 8.2.11Upgrade Splunk Universal Forwarder to version 8.1.14 | Sep 30, 2025 | Mar 25, 2022 |
| Suse | — | Upgrade mariadb104-errormessagesUpgrade zlib-devel-32bitUpgrade mariadb104Upgrade python3-mysqlclientUpgrade zlib-32bitUpgrade libz1Upgrade libmariadb_pluginsUpgrade libmariadb3Upgrade mupdf-devel-staticUpgrade minizip-develUpgrade zlib-devel-staticUpgrade mariadbUpgrade zlibUpgrade mariadb-errormessagesUpgrade libmariadbd104-develUpgrade libmariadbd-develUpgrade zlib-develUpgrade mariadb-clientUpgrade mariadb104-rpm-macrosUpgrade mariadb104-galeraUpgrade liblz4-1Upgrade mariadb104-clientUpgrade libmariadb-develUpgrade zlib-devel-static-32bitUpgrade mariadb104-toolsUpgrade libmariadbd19Upgrade mariadb104-testUpgrade mupdfUpgrade mariadb104-benchUpgrade libz1-32bitUpgrade libminizip1-32bitUpgrade mariadb-toolsUpgrade libminizip1 | Aug 9, 2024 | Mar 25, 2022 |
| Ubuntu | — | Upgrade lib64z1Upgrade zlib1gUpgrade libx32z1 (Ubuntu Pro)Upgrade lib64z1 (Ubuntu Pro)Upgrade lib32z1 (Ubuntu Pro)Upgrade zlib1g (Ubuntu Pro)Upgrade mariadb-serverUpgrade libklibcUpgrade klibc-utils (Ubuntu Pro)Upgrade klibc-utilsUpgrade lib32z1Upgrade rsync (Ubuntu Pro)Upgrade libx32z1Upgrade rsyncUpgrade libklibc (Ubuntu Pro) | Mar 31, 2022 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | Jan 10, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub