Alpine/zlib-ng: critical 9.8
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. S
Action: Upgrade zlib-ng to 2.0.6-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.6-r0 | - |
Fixed versions
| 2.0.6-r0 |
Sources
- osv: ALPINE-CVE-2022-37434#Alpine:v3.23/zlib-ng
- https://security.alpinelinux.org/vuln/CVE-2022-37434
published · modified · JSON