CVE-2022-37434

critical-risk

Published 2022-08-05

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

Do I need to act?

92.5% chance of exploitation in next 30 days

EPSS score — higher than 7% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Fix available

Upgrade to: 1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d, eff308af425b67093bab25f80f1ae950166bece1, 79c57d0cc55db834177d2f8ce4b4d83109a23dc9, 9de633dea8c50bc7d88b62d190e8c3c7242c0f13

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (20)

Zlib

Fedora

Debian Linux

Active Iq Unified Manager

Hci

Management Services For Element Software

Oncommand Workflow Automation

Ontap Select Deploy Administration Utility

Storagegrid

Hci Compute Node

H300S Firmware

H500S Firmware

H700S Firmware

Ipados

Iphone Os

Macos

Watchos

Affected Vendors

Debian Apple Zlib Fedoraproject Netapp Stormshield

References (54)

Mailing List http://seclists.org/fulldisclosure/2022/Oct/37

Mailing List http://seclists.org/fulldisclosure/2022/Oct/38

Mailing List http://seclists.org/fulldisclosure/2022/Oct/41

Mailing List http://seclists.org/fulldisclosure/2022/Oct/42

Mailing List http://www.openwall.com/lists/oss-security/2022/08/05/2

Mailing List http://www.openwall.com/lists/oss-security/2022/08/09/1

Exploit https://github.com/curl/curl/issues/9271

Exploit https://github.com/ivd38/zlib_overflow

Exploit https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zli...

https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d

Patch https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1

Exploit https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/dep...

Mailing List https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html

Mailing List https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20220901-0005/

Third Party Advisory https://security.netapp.com/advisory/ntap-20230427-0007/

and 34 more references

/ 100

critical-risk

Severity 32/34 · Critical

Exploitability 20/34 · Moderate

Exposure 20/34 · Moderate