Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file…
Priority LOW 19Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
Why it matters now
EPSS 0.00655 51st percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 104
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gnu:gzip:1.2.4:*:*:*:*:*:*:* | 1.2.4 | Vulnerable | GNU |
| cpe:2.3:a:gnu:gzip:1.2.4a:*:*:*:*:*:*:* | 1.2.4a | Vulnerable | GNU |
| cpe:2.3:a:gnu:gzip:1.3.3:*:*:*:*:*:*:* | 1.3.3 | Vulnerable | GNU |
| cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:* | 4.0 alpha | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:* | 4.0 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:* | 4.1.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:* | 4.1.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:* | 4.1.1 stable | Vulnerable | FreeBSD |
- cpe:2.3:a:gnu:gzip:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·GNU
- cpe:2.3:a:gnu:gzip:1.2.4a:*:*:*:*:*:*:* Versions 1.2.4a Vulnerable ·GNU
- cpe:2.3:a:gnu:gzip:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·GNU
- cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:* Versions 4.0 alpha Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:* Versions 4.0 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:* Versions 4.1.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:* Versions 4.1.1 stable Vulnerable ·FreeBSD
Show 94 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:* | 4.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:* | 4.2 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:* | 4.3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:* | 4.3 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:* | 4.3 release_p38 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:* | 4.3 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:* | 4.3 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:* | 4.4 release_p42 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:* | 4.4 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:* | 4.4 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:* | 4.5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:* | 4.5 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:* | 4.5 release_p32 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:* | 4.5 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:* | 4.5 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:* | 4.6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:* | 4.6 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:* | 4.6 release_p20 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:* | 4.6 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:* | 4.6 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:* | 4.6.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:* | 4.7 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:* | 4.7 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:* | 4.7 release_p17 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:* | 4.7 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:* | 4.7 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:* | 4.8 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:* | 4.8 pre-release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:* | 4.8 release_p6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:* | 4.8 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:* | 4.9 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:* | 4.9 pre-release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:* | 4.9 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:* | 4.10 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:* | 4.10 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:* | 4.10 release_p8 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:* | 4.10 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:* | 4.11 release_p3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:* | 4.11 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:* | 4.11 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:* | 5.0 alpha | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:* | 5.0 release_p14 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:* | 5.0 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:* | 5.1 alpha | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:* | 5.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:* | 5.1 release_p5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:* | 5.1 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:* | 5.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:* | 5.2.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:* | 5.2.1 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:* | 5.3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:* | 5.3 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:* | 5.3 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:* | 5.3 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:* | 5.4 pre-release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:* | 5.4 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:* | 5.4 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:* | all versions | Vulnerable | gentoo |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Trustix |
| cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Trustix |
| cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Trustix |
| cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_hosting:*:*:*:*:*:*:* | 1.0_hosting | Vulnerable | Turbolinux |
| cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_workgroup:*:*:*:*:*:*:* | 1.0_workgroup | Vulnerable | Turbolinux |
| cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Turbolinux |
| cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:* | all versions | Vulnerable | Turbolinux |
| cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Turbolinux |
| cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Turbolinux |
| cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Turbolinux |
| cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Turbolinux |
| cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Turbolinux |
| cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:* | 4.1 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:* | 4.1 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:* | 5.04 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:* | 5.04 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:* | 5.04 | Vulnerable | Ubuntu |
- cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:* Versions 4.2 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:* Versions 4.3 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:* Versions 4.3 release_p38 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:* Versions 4.3 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:* Versions 4.3 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:* Versions 4.4 release_p42 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:* Versions 4.4 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:* Versions 4.4 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:* Versions 4.5 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:* Versions 4.5 release_p32 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:* Versions 4.5 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:* Versions 4.5 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:* Versions 4.6 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:* Versions 4.6 release_p20 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:* Versions 4.6 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:* Versions 4.6 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:* Versions 4.6.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:* Versions 4.7 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:* Versions 4.7 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:* Versions 4.7 release_p17 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:* Versions 4.7 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:* Versions 4.7 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:* Versions 4.8 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:* Versions 4.8 pre-release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:* Versions 4.8 release_p6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:* Versions 4.8 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:* Versions 4.9 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:* Versions 4.9 pre-release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:* Versions 4.9 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:* Versions 4.10 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:* Versions 4.10 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:* Versions 4.10 release_p8 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:* Versions 4.10 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:* Versions 4.11 release_p3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:* Versions 4.11 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:* Versions 4.11 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:* Versions 5.0 alpha Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:* Versions 5.0 release_p14 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:* Versions 5.0 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:* Versions 5.1 alpha Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:* Versions 5.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:* Versions 5.1 release_p5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:* Versions 5.1 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:* Versions 5.2.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:* Versions 5.2.1 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:* Versions 5.3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:* Versions 5.3 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:* Versions 5.3 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:* Versions 5.3 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:* Versions 5.4 pre-release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:* Versions 5.4 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:* Versions 5.4 releng Vulnerable ·FreeBSD
- cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·gentoo
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Trustix
- cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Trustix
- cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Trustix
- cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_hosting:*:*:*:*:*:*:* Versions 1.0_hosting Vulnerable ·Turbolinux
- cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_workgroup:*:*:*:*:*:*:* Versions 1.0_workgroup Vulnerable ·Turbolinux
- cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Turbolinux
- cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Turbolinux
- cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Turbolinux
- cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Turbolinux
- cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Turbolinux
- cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Turbolinux
- cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Turbolinux
- cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:* Versions 4.1 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:* Versions 4.1 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:* Versions 5.04 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:* Versions 5.04 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:* Versions 5.04 Vulnerable ·Ubuntu
Remediation
Red Hat 1 advisory
- RHSA-2005:357 Released 2005-06-13 · Red Hat rating Lowgzip security update
- Red Hat Desktop version 3 gzip-1.3.3-12.rhel3, gzip-1.3.3-12.rhel3.i386
- Red Hat Enterprise Linux AS version 3 gzip-1.3.3-12.rhel3, gzip-1.3.3-12.rhel3.i386, gzip-1.3.3-12.rhel3.ia64 +1
- Red Hat Enterprise Linux AS version 4 gzip-1.3.3-15.rhel4, gzip-1.3.3-15.rhel4.i386, gzip-1.3.3-15.rhel4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 gzip-1.3.3-15.rhel4, gzip-1.3.3-15.rhel4.i386
- Red Hat Enterprise Linux ES version 3 gzip-1.3.3-12.rhel3, gzip-1.3.3-12.rhel3.i386, gzip-1.3.3-12.rhel3.ia64
- Red Hat Enterprise Linux ES version 4 gzip-1.3.3-15.rhel4, gzip-1.3.3-15.rhel4.i386, gzip-1.3.3-15.rhel4.ia64
- Red Hat Enterprise Linux WS version 3 gzip-1.3.3-12.rhel3, gzip-1.3.3-12.rhel3.i386, gzip-1.3.3-12.rhel3.ia64
- Red Hat Enterprise Linux WS version 4 gzip-1.3.3-15.rhel4, gzip-1.3.3-15.rhel4.i386, gzip-1.3.3-15.rhel4.ia64
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2005:357 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2005:357 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2005:357 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2005:357 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2005:357 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2005:357 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2005:357 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2005:357 |
Timeline
- 2026-10-02 Threatist record created from CVE-2005-0988
- 2026-10-03 Alias added: GHSA-pmqf-rc4m-6f55
- 2026-10-13 EPSS moved to the 50th–90th percentile
References
Sources
- CVE-2005-0988 · CVE Program
- CVE-2005-0988 · NVD
- FIRST EPSS
- GHSA-pmqf-rc4m-6f55 · GitHub Advisory Database · CC BY 4.0
- CVE-2005-0988 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences