CVE-2005-2096
Fixed in a distro release EPSS 6%
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
Products: Siemens CADRA
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | aide | 0.10-6.1.1 |
| Debian 12 | bacula | 1.36.3-2 |
| Debian 12 | dpkg | 1.13.11 |
| Debian 12 | dump | 0.4b40-1 |
| Debian 12 | libphysfs | 1.0.0-5 |
| Debian 12 | pvpgn | 1.7.8-2 |
| Debian 12 | rpm | 4.0.4-31.1 |
| Debian 12 | sash | 3.7-6 |
| Debian 12 | zlib | 1:1.2.2-7 |
| Debian 12 | zsync | 0.4.0-2 |
| Debian 13 | aide | 0.10-6.1.1 |
| Debian 13 | bacula | 1.36.3-2 |
| Debian 13 | dpkg | 1.13.11 |
| Debian 13 | dump | 0.4b40-1 |
| Debian 13 | libphysfs | 1.0.0-5 |
| Debian 13 | pvpgn | 1.7.8-2 |
| Debian 13 | rpm | 4.0.4-31.1 |
| Debian 13 | sash | 3.7-6 |
| Debian 13 | texmacs | 1:1.0.5-3 |
| Debian 13 | zlib | 1:1.2.2-7 |
| Debian 13 | zsync | 0.4.0-2 |
| Debian 14 | aide | 0.10-6.1.1 |
| Debian 14 | bacula | 1.36.3-2 |
| Debian 14 | dpkg | 1.13.11 |
| Debian 14 | dump | 0.4b40-1 |
| Debian 14 | libphysfs | 1.0.0-5 |
| Debian 14 | pvpgn | 1.7.8-2 |
| Debian 14 | rpm | 4.0.4-31.1 |
| Debian 14 | sash | 3.7-6 |
| Debian 14 | texmacs | 1:1.0.5-3 |
| Debian 14 | zlib | 1:1.2.2-7 |
| Debian 14 | zsync | 0.4.0-2 |
| Debian 3.1 | sash | 3.7-5sarge1 |
| Debian 3.1 | zlib | 1:1.2.2-4.sarge.1 |
| Debian 3.1 | zsync | 0.3.3-1.sarge.1 |
| Red Hat Enterprise Linux 4 | zlib | 0:1.2.1.2-1.1 |
| Red Hat Enterprise Linux 4 | zlib-debuginfo | 0:1.2.1.2-1.1 |
| Red Hat Enterprise Linux 4 | zlib-devel | 0:1.2.1.2-1.1 |
| Red Hat network satellite 4.2 | rhn-solaris-bootstrap | 0:5.0.2-3 |
| Red Hat network satellite 4.2 | rhn_solaris_bootstrap_5_0_2_3 | 0:1-0 |
| Red Hat network satellite 5.0 el4 | rhn-solaris-bootstrap | 0:5.0.2-3 |
| Red Hat network satellite 5.0 el4 | rhn_solaris_bootstrap_5_0_2_3 | 0:1-0 |
| Red Hat network satellite 5.1 | rhn-solaris-bootstrap | 0:5.1.1-3 |
| Red Hat network satellite 5.1 | rhn_solaris_bootstrap_5_1_1_3 | 0:1-0 |
| openSUSE Tumbleweed | httrack | 3.48.22-1.3 |