Kritik CVSS 9.8 PoC var

CVE-2022-37434: Zlib: sınır dışı yazma

Yayın: 5 Ağustos 2022 10:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

Özet bilgiler

Ürün: Zlib Zlib
CVSS v3.1: 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: %19,24 (yüzdelik 97)
CWE: CWE-787
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
zlib-zlib	—	1.2.12	—
fedoraproject-fedora	35	35	—
fedoraproject-fedora	36	36	—
fedoraproject-fedora	37	37	—
debian-debian-linux	10.0	10.0	—
netapp-active-iq-unified-manager	—	—	—
netapp-active-iq-unified-manager	—	—	—
netapp-hci	—	—	—
netapp-management-services-for-element-software	—	—	—
netapp-oncommand-workflow-automation	—	—	—
netapp-ontap-select-deploy-administration-utility	—	—	—
netapp-storagegrid	—	—	—
netapp-hci-compute-node	—	—	—
netapp-h300s-firmware	—	—	—
netapp-h500s-firmware	—	—	—
netapp-h700s-firmware	—	—	—
netapp-h700s-firmware	—	—	—
apple-ipados	—	—	15.7.1
apple-iphone-os	—	—	15.7.1
apple-iphone-os	16.0	—	16.1
apple-macos	11.0	—	11.7.1
apple-macos	12.0.0	—	12.6.1
apple-watchos	—	—	9.1
stormshield-stormshield-network-security	3.7.31	—	3.7.34
stormshield-stormshield-network-security	3.11.0	—	3.11.22
stormshield-stormshield-network-security	4.3.0	—	4.3.16
stormshield-stormshield-network-security	4.6.0	—	4.6.3

Kaynaklar

Uygulamada aç Tüm CVE kayıtları