zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rsync-daemonUpgrade rsyncUpgrade zlib-develUpgrade zlib-staticUpgrade zlib | Oct 31, 2022 | Aug 5, 2022 |
| Alpine Linux | — | Upgrade zlibUpgrade zlib-ng | Mar 26, 2024 | Aug 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rsyncUpgrade minizipUpgrade zlib-staticUpgrade minizip-develUpgrade zlib-develUpgrade rsync-debuginfoUpgrade zlib-debuginfoUpgrade zlib | Oct 11, 2022 | Aug 5, 2022 |
| Amazon_linux | — | Upgrade zlib | Dec 10, 2022 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade minizip-compat-develUpgrade zlib-debuginfoUpgrade minizip-compatUpgrade zlib-develUpgrade rsync-daemonUpgrade zlib-debugsourceUpgrade zlibUpgrade minizip-compat-debuginfoUpgrade rsyncUpgrade rsync-debuginfoUpgrade rsync-debugsourceUpgrade zlib-static | Feb 17, 2025 | Aug 5, 2022 |
| Apple Osx Accelerateframework | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Apfs | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Assets | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Ats | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Audio | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Betaaccessutility | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Bom | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Bootcamp | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Corebluetooth | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Coretypes | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Crashreporter | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Curl | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Directoryutility | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Driverkit | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Exchange | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Facetime | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Finder | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Findmy | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Grapher | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Heimdal | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Imageprocessing | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Intelgraphicsdriver | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Iohidfamily | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Iokit | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Mail | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Maps | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Medialibrary | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Ncurses | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Notes | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Notifications | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Packagekit | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Photos | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Ppp | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Ruby | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Sandbox | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Security | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Shortcuts | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Sidecar | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Siri | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Smb | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Softwareupdate | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Sqlite | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Systemsettings | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Tcc | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Vim | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Vpn | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Weather | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Webkit | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Webkitpdf | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Webkitsandboxing | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Webkitstorage | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Wifi | — | — | Oct 14, 2024 | Aug 5, 2022 |
| Apple Osx Zlib | — | Upgrade macOS to the latest version | Oct 28, 2022 | Oct 27, 2022 |
| Autodesk Autocad | — | — | Jul 1, 2025 | Apr 17, 2023 |
| Centos_linux | — | Upgrade zlib-staticUpgrade zlib-debuginfoUpgrade zlibUpgrade minizip-develUpgrade zlib-develUpgrade minizip | Oct 26, 2022 | Aug 5, 2022 |
| Debian | — | Upgrade libz-mingw-w64Upgrade zlib | Sep 13, 2022 | Aug 5, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade mysql-client80Upgrade mysql-server57Upgrade mysql-client57Upgrade FreeBSDUpgrade mysql-connector-javaUpgrade mysql-server80 | Nov 4, 2022 | Aug 31, 2022 |
| Gentoo Linux | — | Upgrade sys-libs/zlib. | Nov 1, 2022 | Aug 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade binutils | Nov 3, 2022 | Aug 5, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade binutils | Mar 8, 2023 | Aug 5, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade zlib-develUpgrade zlib | Oct 28, 2022 | Aug 5, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade zlibUpgrade zlib-devel | Nov 4, 2022 | Aug 5, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade zlibUpgrade zlib-devel | Oct 11, 2022 | Aug 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade binutils | Nov 15, 2022 | Aug 5, 2022 |
| Ibm Aix | — | Apply the fix or workaround for zlib_advisory2 | Jul 27, 2023 | Aug 5, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 9, 2024 |
| Oracle Mysql | — | Upgrade to MySQL version 5.7.42Upgrade to MySQL version 8.0.32 | Jun 15, 2026 | Aug 5, 2022 |
| Oracle_linux | — | Upgrade rsync-daemonUpgrade minizipUpgrade zlib-develUpgrade minizip-develUpgrade zlib-staticUpgrade rsyncUpgrade zlib | Oct 26, 2022 | Aug 5, 2022 |
| Redhat_linux | — | Upgrade zlibNo solution existsUpgrade rsyncUpgrade rsync-debuginfoUpgrade zlib-debuginfoUpgrade zlib-debugsourceUpgrade zlib-staticUpgrade minizipUpgrade rsync-daemonUpgrade zlib-develUpgrade minizip-compat-debuginfoUpgrade rsync-debugsourceUpgrade minizip-devel | Oct 26, 2022 | Aug 5, 2022 |
| Rocky_linux | — | Upgrade zlib-debuginfoUpgrade zlib-develUpgrade rsync-debuginfoUpgrade zlib-staticUpgrade zlib-debugsourceUpgrade zlibUpgrade rsync-debugsourceUpgrade rsync | Mar 12, 2024 | Aug 5, 2022 |
| Splunk | — | Upgrade Splunk Universal Forwarder to version 8.2.11Upgrade Splunk Universal Forwarder to version 8.1.14Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Universal Forwarder to version 9.0.5Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 5, 2022 |
| Suse | — | Upgrade libqt5dbus-develUpgrade libqt5sql5-postgresqlUpgrade zlib-devel-staticUpgrade libqt5gui-develUpgrade libz1Upgrade libqt5gui-private-headers-develUpgrade vlcUpgrade libqt5xml5Upgrade libqt5sql5-sqliteUpgrade libqt5dbus-private-headers-develUpgrade libqt5test5Upgrade vlc-codec-gstreamerUpgrade libminizip1-32bitUpgrade zlib-develUpgrade libqt5sql5-mysqlUpgrade libz1-32bitUpgrade libqt5network-private-headers-develUpgrade libqt5widgets5Upgrade vlc-jackUpgrade libqt5-qtbase-develUpgrade libqt5dbus5Upgrade zlib-devel-32bitUpgrade libqt5-qtbase-private-headers-develUpgrade libqt5openglextensions-devel-staticUpgrade libqt5network-develUpgrade libqt5xml-develUpgrade libqt5sql-private-headers-develUpgrade libqt5printsupport-develUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade vlc-vdpauUpgrade vlc-noxUpgrade libqt5-qtbase-common-develUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5concurrent-develUpgrade libqt5platformsupport-devel-staticUpgrade libvlccore9Upgrade vlc-develUpgrade libqt5concurrent5Upgrade libqt5gui5Upgrade libqt5printsupport-private-headers-develUpgrade libqt5core-develUpgrade libqt5sql5-unixodbcUpgrade libqt5network5Upgrade libqt5kmssupport-devel-staticUpgrade libvlc5Upgrade vlc-langUpgrade libqt5platformheaders-develUpgrade libqt5kmssupport-private-headers-develUpgrade libqt5opengl-private-headers-develUpgrade libminizip1Upgrade libqt5opengl5Upgrade libqt5widgets-develUpgrade minizip-develUpgrade libqt5test-develUpgrade libqt5core-private-headers-develUpgrade libqt5test-private-headers-develUpgrade vlc-qtUpgrade libqt5widgets-private-headers-develUpgrade libqt5printsupport5Upgrade vlc-opencvUpgrade libqt5core5Upgrade libqt5sql5Upgrade zlib-devel-static-32bitUpgrade libqt5opengl-develUpgrade libqt5sql-devel | Oct 26, 2022 | Aug 5, 2022 |
| Ubuntu | — | Upgrade klibc-utils (Ubuntu Pro)Upgrade lib32z1 (Ubuntu Pro)Upgrade libklibc (Ubuntu Pro)Upgrade lib32z1Upgrade lib64z1Upgrade klibc-utilsUpgrade zlib1gUpgrade zlib1g (Ubuntu Pro)Upgrade rsync (Ubuntu Pro)Upgrade libx32z1 (Ubuntu Pro)Upgrade rsyncUpgrade lib64z1 (Ubuntu Pro)Upgrade zlib-bin (Ubuntu Pro)Upgrade libklibcUpgrade libx32z1 | Aug 18, 2022 | Aug 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub