zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mingw32-zlibalma-upgrade-mingw32-zlib-staticalma-upgrade-mingw64-zlibalma-upgrade-mingw64-zlib-staticalma-upgrade-rsyncalma-upgrade-rsync-daemonalma-upgrade-zlibalma-upgrade-zlib-develalma-upgrade-zlib-static | May 4, 2022 | Mar 25, 2022 | |
| Alpine Linux | alpine-linux-upgrade-zlibalpine-linux-upgrade-mariadbalpine-linux-upgrade-minizipalpine-linux-upgrade-ruby-nokogiri | Mar 26, 2024 | Mar 25, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-minizipamazon-linux-ami-2-upgrade-minizip-develamazon-linux-ami-2-upgrade-zlibamazon-linux-ami-2-upgrade-zlib-debuginfoamazon-linux-ami-2-upgrade-zlib-develamazon-linux-ami-2-upgrade-zlib-static | Jul 4, 2022 | Mar 25, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-rsyncamazon-linux-upgrade-zlib | Jul 8, 2022 | Mar 25, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-minizip-compatamazon-linux-2023-upgrade-minizip-compat-debuginfoamazon-linux-2023-upgrade-minizip-compat-develamazon-linux-2023-upgrade-rsyncamazon-linux-2023-upgrade-rsync-daemonamazon-linux-2023-upgrade-rsync-debuginfoamazon-linux-2023-upgrade-rsync-debugsourceamazon-linux-2023-upgrade-zlibamazon-linux-2023-upgrade-zlib-debuginfoamazon-linux-2023-upgrade-zlib-debugsourceamazon-linux-2023-upgrade-zlib-develamazon-linux-2023-upgrade-zlib-static | Feb 17, 2025 | Apr 20, 2018 | |
| Apple Osx Zlib | apple-osx-security-update-2022-004-catalinaapple-osx-upgrade-latest | May 17, 2022 | Mar 25, 2022 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 25, 2022 |
| Autodesk Autocad | autodesk-autocad-upgrade-latest | Jul 22, 2025 | Sep 23, 2022 | |
| Azul Zulu | azul-zulu-jdk6azul-zulu-jdk7azul-zulu-jdk8azul-zulu-jdk11azul-zulu-jdk13azul-zulu-jdk15azul-zulu-jdk17 | Jun 7, 2022 | Mar 25, 2022 | |
| Centos_linux | — | centos-upgrade-minizipcentos-upgrade-minizip-compat-debuginfocentos-upgrade-minizip-develcentos-upgrade-rsynccentos-upgrade-rsync-daemoncentos-upgrade-rsync-debuginfocentos-upgrade-rsync-debugsourcecentos-upgrade-zlibcentos-upgrade-zlib-debuginfocentos-upgrade-zlib-debugsourcecentos-upgrade-zlib-develcentos-upgrade-zlib-static | Apr 29, 2022 | Mar 25, 2022 |
| Debian | debian-upgrade-libz-mingw-w64debian-upgrade-zlib | Apr 4, 2022 | Mar 25, 2022 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 19, 2022 | |
| Freebsd | freebsd-upgrade-package-mariadb103-serverfreebsd-upgrade-package-mariadb104-serverfreebsd-upgrade-package-mariadb105-serverfreebsd-upgrade-package-mariadb106-serverfreebsd-upgrade-package-mysql-server56freebsd-upgrade-package-mysql-server57freebsd-upgrade-package-mysql-client80freebsd-upgrade-package-mysql-server80freebsd-upgrade-base-13_0-release-p11freebsd-upgrade-base-12_3-release-p5 | Nov 4, 2022 | Aug 25, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-rsyncgentoo-linux-upgrade-sys-libs-zlib | Nov 1, 2022 | Mar 25, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-rsync | Aug 2, 2022 | Mar 25, 2022 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-rsync | Mar 8, 2023 | Mar 25, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-zlibhuawei-euleros-2_0_sp3-upgrade-zlib-devel | May 25, 2022 | Mar 25, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-zlibhuawei-euleros-2_0_sp5-upgrade-zlib-devel | Jun 17, 2022 | Mar 25, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-zlibhuawei-euleros-2_0_sp8-upgrade-zlib-devel | Jun 22, 2022 | Mar 25, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-rsync | Jul 11, 2022 | Mar 25, 2022 | |
| Ibm Aix | ibm-aix-zlib_advisory | Oct 12, 2022 | Mar 25, 2022 | |
| Mariadb Mariadb | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | mariadb-mariadb-upgrade-latest | Mar 4, 2025 | Mar 25, 2022 |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 4, 2023 | |
| Oracle Missing Cpu Jan 2023 | oracle-apply-jan-2023-cpu | Jan 17, 2023 | Mar 25, 2022 | |
| Oracle Mysql | mysql-upgrade-5_7_39mysql-upgrade-8_0_30 | Jun 15, 2026 | Mar 25, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-mingw32-zliboracle-linux-upgrade-mingw32-zlib-staticoracle-linux-upgrade-mingw64-zliboracle-linux-upgrade-mingw64-zlib-staticoracle-linux-upgrade-miniziporacle-linux-upgrade-minizip-develoracle-linux-upgrade-rsyncoracle-linux-upgrade-rsync-daemonoracle-linux-upgrade-zliboracle-linux-upgrade-zlib-develoracle-linux-upgrade-zlib-static | Apr 29, 2022 | Apr 20, 2018 |
| Redhat_linux | redhat-upgrade-mingw32-zlibredhat-upgrade-mingw32-zlib-debuginforedhat-upgrade-mingw32-zlib-staticredhat-upgrade-mingw64-zlibredhat-upgrade-mingw64-zlib-debuginforedhat-upgrade-mingw64-zlib-staticredhat-upgrade-minizipredhat-upgrade-minizip-compat-debuginforedhat-upgrade-minizip-develredhat-upgrade-rsyncredhat-upgrade-rsync-daemonredhat-upgrade-rsync-debuginforedhat-upgrade-rsync-debugsourceredhat-upgrade-zlibredhat-upgrade-zlib-debuginforedhat-upgrade-zlib-debugsourceredhat-upgrade-zlib-develredhat-upgrade-zlib-static | Apr 29, 2022 | Mar 25, 2022 | |
| Rocky_linux | rocky-upgrade-rsyncrocky-upgrade-rsync-debuginforocky-upgrade-rsync-debugsourcerocky-upgrade-zlibrocky-upgrade-zlib-debuginforocky-upgrade-zlib-debugsourcerocky-upgrade-zlib-develrocky-upgrade-zlib-static | Mar 5, 2024 | Mar 25, 2022 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Mar 25, 2022 | |
| Suse | — | suse-upgrade-liblz4-1suse-upgrade-libmariadb-develsuse-upgrade-libmariadb3suse-upgrade-libmariadb_pluginssuse-upgrade-libmariadbd-develsuse-upgrade-libmariadbd104-develsuse-upgrade-libmariadbd19suse-upgrade-libminizip1suse-upgrade-libminizip1-32bitsuse-upgrade-libz1suse-upgrade-libz1-32bitsuse-upgrade-mariadbsuse-upgrade-mariadb-clientsuse-upgrade-mariadb-errormessagessuse-upgrade-mariadb-toolssuse-upgrade-mariadb104suse-upgrade-mariadb104-benchsuse-upgrade-mariadb104-clientsuse-upgrade-mariadb104-errormessagessuse-upgrade-mariadb104-galerasuse-upgrade-mariadb104-rpm-macrossuse-upgrade-mariadb104-testsuse-upgrade-mariadb104-toolssuse-upgrade-minizip-develsuse-upgrade-mupdfsuse-upgrade-mupdf-devel-staticsuse-upgrade-python3-mysqlclientsuse-upgrade-zlibsuse-upgrade-zlib-32bitsuse-upgrade-zlib-develsuse-upgrade-zlib-devel-32bitsuse-upgrade-zlib-devel-staticsuse-upgrade-zlib-devel-static-32bit | Aug 9, 2024 | Mar 25, 2022 |
| Ubuntu | ubuntu-pro-upgrade-klibc-utilsubuntu-pro-upgrade-lib32z1ubuntu-pro-upgrade-lib64z1ubuntu-pro-upgrade-libklibcubuntu-pro-upgrade-libx32z1ubuntu-pro-upgrade-rsyncubuntu-pro-upgrade-zlib1gubuntu-upgrade-klibc-utilsubuntu-upgrade-lib32z1ubuntu-upgrade-lib64z1ubuntu-upgrade-libklibcubuntu-upgrade-libx32z1ubuntu-upgrade-mariadb-serverubuntu-upgrade-rsyncubuntu-upgrade-zlib1g | Mar 31, 2022 | Mar 25, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 25, 2022 | |
| Zimbra Collaboration | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | zimbra-collaboration-upgrade-latest | Jan 10, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub