Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The issues resulted from improper input validation and heap-based buffer overflow.
A local attacker could exploit the problem during compression using a crafted malicious file potentially leading to denial of service of the software.
Patches: The issue has been patched in commit 8352d10 https://github.com/cloudflare/zlib/commit/8352d108c05db1bdc5ac3bdf834dad641694c13c . The upstream repository is not affected.
References
| Link | Resource |
|---|---|
| https://github.com/cloudflare/zlib | Product |
| https://github.com/cloudflare/zlib/security/advisories/GHSA-vww9-j87r-4cqh | Patch Third Party Advisory |
Configurations
History
10 Jan 2024, 01:14
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cloudflare:zlib:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-787 | |
| First Time |
Cloudflare
Cloudflare zlib |
|
| References | () https://github.com/cloudflare/zlib - Product | |
| References | () https://github.com/cloudflare/zlib/security/advisories/GHSA-vww9-j87r-4cqh - Patch, Third Party Advisory |
04 Jan 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-04 12:15
Updated : 2024-01-10 01:14
NVD link : CVE-2023-6992
Mitre link : CVE-2023-6992
JSON object : View
Products Affected
cloudflare
- zlib
CWE
CWE-787
Out-of-bounds Write