2022-08-05 07:00:51 +00:00
{
2023-04-27 15:00:37 +00:00
"data_version" : "4.0" ,
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
2022-08-05 07:00:51 +00:00
"CVE_data_meta" : {
2022-10-30 23:00:44 +00:00
"ID" : "CVE-2022-37434" ,
2023-04-27 15:00:37 +00:00
"ASSIGNER" : "cve@mitre.org" ,
2022-08-05 07:00:51 +00:00
"STATE" : "PUBLIC"
} ,
2022-10-30 23:00:44 +00:00
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference)."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
2023-04-27 15:00:37 +00:00
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "n/a" ,
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "n/a" ,
"status" : "unknown"
}
]
}
}
]
}
}
]
}
}
]
}
} ,
2022-08-05 07:00:51 +00:00
"references" : {
"reference_data" : [
{
"url" : "https://github.com/ivd38/zlib_overflow" ,
"refsource" : "MISC" ,
"name" : "https://github.com/ivd38/zlib_overflow"
} ,
{
"url" : "https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1" ,
"refsource" : "MISC" ,
"name" : "https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1"
} ,
{
"url" : "https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063" ,
"refsource" : "MISC" ,
"name" : "https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063"
} ,
{
"url" : "https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764" ,
"refsource" : "MISC" ,
"name" : "https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764"
2022-08-06 03:00:58 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "http://www.openwall.com/lists/oss-security/2022/08/05/2" ,
"refsource" : "MISC" ,
"name" : "http://www.openwall.com/lists/oss-security/2022/08/05/2"
2022-10-30 23:00:32 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://github.com/curl/curl/issues/9271" ,
2022-10-30 23:00:32 +00:00
"refsource" : "MISC" ,
2023-04-27 15:00:37 +00:00
"name" : "https://github.com/curl/curl/issues/9271"
2022-10-30 23:00:32 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "http://www.openwall.com/lists/oss-security/2022/08/09/1" ,
"refsource" : "MISC" ,
"name" : "http://www.openwall.com/lists/oss-security/2022/08/09/1"
2022-10-30 23:00:32 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/"
2022-08-08 16:01:05 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://www.debian.org/security/2022/dsa-5218" ,
"refsource" : "MISC" ,
"name" : "https://www.debian.org/security/2022/dsa-5218"
2022-08-09 03:00:51 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/"
2022-08-18 04:00:41 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://security.netapp.com/advisory/ntap-20220901-0005/" ,
"refsource" : "MISC" ,
"name" : "https://security.netapp.com/advisory/ntap-20220901-0005/"
2022-08-26 04:00:38 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/"
2022-08-31 12:00:34 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html" ,
"refsource" : "MISC" ,
"name" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html"
2022-09-01 14:00:35 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/"
2022-09-16 04:00:35 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/"
2022-10-27 20:00:32 +00:00
} ,
2022-10-27 22:00:31 +00:00
{
2023-04-27 15:00:37 +00:00
"url" : "https://support.apple.com/kb/HT213489" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/kb/HT213489"
2022-10-27 22:00:31 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://support.apple.com/kb/HT213488" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/kb/HT213488"
} ,
{
"url" : "https://support.apple.com/kb/HT213494" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/kb/HT213494"
2022-10-27 22:00:31 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://support.apple.com/kb/HT213493" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/kb/HT213493"
2022-10-27 22:00:31 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://support.apple.com/kb/HT213491" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/kb/HT213491"
2022-10-27 22:00:31 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "https://support.apple.com/kb/HT213490" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/kb/HT213490"
2022-10-27 22:00:31 +00:00
} ,
2022-10-27 20:00:32 +00:00
{
2023-04-27 15:00:37 +00:00
"url" : "http://seclists.org/fulldisclosure/2022/Oct/41" ,
"refsource" : "MISC" ,
"name" : "http://seclists.org/fulldisclosure/2022/Oct/41"
2022-10-30 23:00:32 +00:00
} ,
{
2023-04-27 15:00:37 +00:00
"url" : "http://seclists.org/fulldisclosure/2022/Oct/38" ,
"refsource" : "MISC" ,
"name" : "http://seclists.org/fulldisclosure/2022/Oct/38"
} ,
{
"url" : "http://seclists.org/fulldisclosure/2022/Oct/37" ,
"refsource" : "MISC" ,
"name" : "http://seclists.org/fulldisclosure/2022/Oct/37"
} ,
{
"url" : "http://seclists.org/fulldisclosure/2022/Oct/42" ,
"refsource" : "MISC" ,
"name" : "http://seclists.org/fulldisclosure/2022/Oct/42"
} ,
{
"url" : "https://security.netapp.com/advisory/ntap-20230427-0007/" ,
"refsource" : "MISC" ,
"name" : "https://security.netapp.com/advisory/ntap-20230427-0007/"
2022-08-05 07:00:51 +00:00
}
]
}
}