Red Hat Security Advisory

RHSA-2022:7106

zlib security update

Released 2022-10-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) zlib-1.2.11-19.el8_6, zlib-devel-1.2.11-19.el8_6
Red Hat Enterprise Linux CRB (v. 8) zlib-static-1.2.11-19.el8_6

TI-2022-17498 CVE-2022-37434 · GHSA-cfmr-vrgj-vqwv

HIGH 75

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19243 Published 2022-08-05 Partial fix CWE-120