Debian/gzip: unknown

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.

Action: Upgrade gzip to 1.3.5-15 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-4338#Debian:13/gzip
• https://security-tracker.debian.org/tracker/CVE-2006-4338

published 2006-09-19T21:07:00Z · modified 2026-10-22T23:47:26.465008491Z · JSON