cvelist/2022/37xxx/CVE-2022-37434.json
2025-05-02 18:00:39 +00:00

192 lines
8.5 KiB
JSON

{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"CVE_data_meta": {
"ID": "CVE-2022-37434",
"ASSIGNER": "cve@mitre.org",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://github.com/ivd38/zlib_overflow",
"refsource": "MISC",
"name": "https://github.com/ivd38/zlib_overflow"
},
{
"url": "https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1",
"refsource": "MISC",
"name": "https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1"
},
{
"url": "https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063",
"refsource": "MISC",
"name": "https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063"
},
{
"url": "https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764",
"refsource": "MISC",
"name": "https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764"
},
{
"url": "http://www.openwall.com/lists/oss-security/2022/08/05/2",
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2022/08/05/2"
},
{
"url": "https://github.com/curl/curl/issues/9271",
"refsource": "MISC",
"name": "https://github.com/curl/curl/issues/9271"
},
{
"url": "http://www.openwall.com/lists/oss-security/2022/08/09/1",
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2022/08/09/1"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/",
"refsource": "MISC",
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/"
},
{
"url": "https://www.debian.org/security/2022/dsa-5218",
"refsource": "MISC",
"name": "https://www.debian.org/security/2022/dsa-5218"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/",
"refsource": "MISC",
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/"
},
{
"url": "https://security.netapp.com/advisory/ntap-20220901-0005/",
"refsource": "MISC",
"name": "https://security.netapp.com/advisory/ntap-20220901-0005/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/",
"refsource": "MISC",
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html",
"refsource": "MISC",
"name": "https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/",
"refsource": "MISC",
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/",
"refsource": "MISC",
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/"
},
{
"url": "https://support.apple.com/kb/HT213489",
"refsource": "MISC",
"name": "https://support.apple.com/kb/HT213489"
},
{
"url": "https://support.apple.com/kb/HT213488",
"refsource": "MISC",
"name": "https://support.apple.com/kb/HT213488"
},
{
"url": "https://support.apple.com/kb/HT213494",
"refsource": "MISC",
"name": "https://support.apple.com/kb/HT213494"
},
{
"url": "https://support.apple.com/kb/HT213493",
"refsource": "MISC",
"name": "https://support.apple.com/kb/HT213493"
},
{
"url": "https://support.apple.com/kb/HT213491",
"refsource": "MISC",
"name": "https://support.apple.com/kb/HT213491"
},
{
"url": "https://support.apple.com/kb/HT213490",
"refsource": "MISC",
"name": "https://support.apple.com/kb/HT213490"
},
{
"url": "http://seclists.org/fulldisclosure/2022/Oct/41",
"refsource": "MISC",
"name": "http://seclists.org/fulldisclosure/2022/Oct/41"
},
{
"url": "http://seclists.org/fulldisclosure/2022/Oct/38",
"refsource": "MISC",
"name": "http://seclists.org/fulldisclosure/2022/Oct/38"
},
{
"url": "http://seclists.org/fulldisclosure/2022/Oct/37",
"refsource": "MISC",
"name": "http://seclists.org/fulldisclosure/2022/Oct/37"
},
{
"url": "http://seclists.org/fulldisclosure/2022/Oct/42",
"refsource": "MISC",
"name": "http://seclists.org/fulldisclosure/2022/Oct/42"
},
{
"url": "https://security.netapp.com/advisory/ntap-20230427-0007/",
"refsource": "MISC",
"name": "https://security.netapp.com/advisory/ntap-20230427-0007/"
},
{
"url": "https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d",
"refsource": "MISC",
"name": "https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d"
}
]
}
}