CVE-2005-1849
Fixed in a distro release EPSS 4%
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
Products: zlib
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sash | 3.7-5sarge1 |
| Debian 12 | zlib | 1:1.2.3-1 |
| Debian 12 | zsync | 0.4.1-1 |
| Debian 13 | sash | 3.7-5sarge1 |
| Debian 13 | zlib | 1:1.2.3-1 |
| Debian 13 | zsync | 0.4.1-1 |
| Debian 14 | sash | 3.7-5sarge1 |
| Debian 14 | zlib | 1:1.2.3-1 |
| Debian 14 | zsync | 0.4.1-1 |
| Debian 3.1 | sash | 3.7-5sarge1 |
| Debian 3.1 | zlib | 1:1.2.2-4.sarge.2 |
| Debian 3.1 | zsync | 0.3.3-1.sarge.1 |
| Red Hat Enterprise Linux 4 | zlib | 0:1.2.1.2-1.2 |
| Red Hat Enterprise Linux 4 | zlib-debuginfo | 0:1.2.1.2-1.2 |
| Red Hat Enterprise Linux 4 | zlib-devel | 0:1.2.1.2-1.2 |
| Red Hat network satellite 4.2 | rhn-solaris-bootstrap | 0:5.0.2-3 |
| Red Hat network satellite 4.2 | rhn_solaris_bootstrap_5_0_2_3 | 0:1-0 |
| Red Hat network satellite 5.0 el4 | rhn-solaris-bootstrap | 0:5.0.2-3 |
| Red Hat network satellite 5.0 el4 | rhn_solaris_bootstrap_5_0_2_3 | 0:1-0 |
| Red Hat network satellite 5.1 | rhn-solaris-bootstrap | 0:5.1.1-3 |
| Red Hat network satellite 5.1 | rhn_solaris_bootstrap_5_1_1_3 | 0:1-0 |