SkipNavigation
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric



 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

Vulnerability Note VU#238678

The zlib compression library is vulnerable to a denial-of-service condition

Overview

Un-handled error conditions in the zlib compression library may allow an attacker to cause a denial-of-service condition.

I. Description

There is a vulnerability in the error handling mechanisms of the decompression functions in the zlib compression library. The decompression functions inflate() and inflateBack() fail to handle certain error conditions properly. If an un-handled error condition is raised, the application linked to zlib may abruptly and abnormally terminate. This vulnerability may be exploited locally or remotely depending on the application being attacked.

This issue exists in zlib versions 1.2.0.x and 1.2.x, other versions are not vulnerable.

II. Impact

A malicious user may be able to intentionally raise an un-handled error condition by supplying the vulnerable functions with specially crafted compressed data. As a result, applications linked to the zlib library may abruptly and abnormally terminate resulting in a denial-of-service condition.

III. Solution

Check with Vendor


Users who suspect they are vulnerable are encouraged to check with their vendor to determine the appropriate action to take. Please see the list of vendors we have notified below.

Systems Affected

VendorStatusDate NotifiedDate Updated
3ComUnknown1-Sep-2004
AlcatelUnknown1-Sep-2004
AOL Time WarnerUnknown13-Sep-2004
AppGate Network Security ABNot Vulnerable2-Sep-2004
Apple Computer Inc.Not Vulnerable17-Feb-2005
Aruba NetworksNot Vulnerable13-Sep-2004
At&TUnknown1-Sep-2004
AvayaUnknown1-Sep-2004
Avici Systems Inc.Unknown1-Sep-2004
BitviseNot Vulnerable13-Sep-2004
BrorderwareUnknown1-Sep-2004
BSDIUnknown1-Sep-2004
CerticomNot Vulnerable9-Sep-2004
Check PointNot Vulnerable7-Sep-2004
Chiaro NetworksNot Vulnerable2-Sep-2004
Cisco SystemsUnknown31-Aug-2005
Cisco Systems Inc.Unknown2-Sep-2004
ClavisterNot Vulnerable2-Sep-2004
Computer AssociatesUnknown1-Sep-2004
ConectivaUnknown1-Sep-2004
CovErtUnknown1-Sep-2004
Cray Inc.Not Vulnerable1-Sep-2004
cryptlibNot Vulnerable7-Sep-2004
Crypto++Not Vulnerable2-Sep-2004
CVS HomeVulnerable5-Oct-2005
CwntUnknown1-Sep-2004
Data ConnectionUnknown1-Sep-2004
DebianVulnerable2-Sep-2004
DlinkUnknown1-Sep-2004
EMC CorporationUnknown1-Sep-2004
EngradeUnknown1-Sep-2004
eSoftNot Vulnerable2-Sep-2004
Extreme NetworksNot Vulnerable16-Sep-2004
F5 NetworksUnknown1-Sep-2004
FiSSHUnknown1-Sep-2004
FortinetUnknown1-Sep-2004
Foundry Networks Inc.Not Vulnerable3-Sep-2004
FreeBSDNot Vulnerable13-Sep-2004
FreSSHUnknown1-Sep-2004
FujitsuUnknown1-Sep-2004
GTAUnknown1-Sep-2004
Hewlett-Packard CompanyUnknown1-Sep-2004
HitachiUnknown1-Sep-2004
HyperchipUnknown1-Sep-2004
IAIKUnknown1-Sep-2004
IBMUnknown2-Sep-2004
IBM-zSeriesUnknown1-Sep-2004
IMmunixUnknown1-Sep-2004
Ingrian NetworksUnknown1-Sep-2004
IntelUnknown1-Sep-2004
InterpeakUnknown1-Sep-2004
Intersoft International Inc.Not Vulnerable2-Sep-2004
IntotoNot Vulnerable16-Sep-2004
IP FilterUnknown1-Sep-2004
Juniper NetworksNot Vulnerable1-Sep-2004
LachmanUnknown1-Sep-2004
LibgcryptNot Vulnerable13-Sep-2004
libpng.orgVulnerable2-Sep-2004
LinksysUnknown1-Sep-2004
lshUnknown1-Sep-2004
Lucent TechnologiesUnknown1-Sep-2004
LuminousUnknown1-Sep-2004
MacSSHVulnerable7-Sep-2004
MandrakeSoftUnknown1-Sep-2004
Microsoft CorporationUnknown1-Sep-2004
MirapointNot Vulnerable2-Sep-2004
MontaVista SoftwareUnknown1-Sep-2004
MozillaUnknown1-Sep-2004
Multi-Tech Systems Inc.Unknown1-Sep-2004
MultinetUnknown1-Sep-2004
NEC CorporationUnknown1-Sep-2004
NETBSDUnknown1-Sep-2004
NETcompositeUnknown1-Sep-2004
NetfilterUnknown1-Sep-2004
Netscape Communications CorporationUnknown1-Sep-2004
Netscape (AOL) NSSUnknown1-Sep-2004
NetScreenUnknown1-Sep-2004
NettleUnknown1-Sep-2004
Network ApplicanceUnknown1-Sep-2004
NextHopNot Vulnerable1-Oct-2004
NokiaUnknown1-Sep-2004
Nortel NetworksUnknown1-Sep-2004
NovellUnknown1-Sep-2004
OpenBSDUnknown1-Sep-2004
OpenSSHUnknown1-Sep-2004
OpenSSLUnknown1-Sep-2004
Openwall GNU/*/LinuxNot Vulnerable15-Sep-2004
Oracle CorporationUnknown1-Sep-2004
Pragma SystemsUnknown1-Sep-2004
PuttyUnknown1-Sep-2004
Red Hat Inc.Unknown1-Sep-2004
Redback Networks Inc.Unknown1-Sep-2004
Riverstone NetworksUnknown1-Sep-2004
RSA SecurityUnknown1-Sep-2004
SCOUnknown1-Sep-2004
Secure Computing CorporationUnknown1-Sep-2004
SecureWorksUnknown1-Sep-2004
SequentUnknown1-Sep-2004
SGIUnknown1-Sep-2004
Sony CorporationUnknown1-Sep-2004
SpyrusUnknown1-Sep-2004
StonesoftNot Vulnerable5-Oct-2004
Sun Microsystems Inc.Not Vulnerable27-Sep-2004
SuSE Inc.Not Vulnerable2-Sep-2004
Symantec CorporationUnknown1-Sep-2004
TTSSH/TeraTermUnknown2-Sep-2004
TurboLinuxUnknown1-Sep-2004
UnisysUnknown1-Sep-2004
VanDyke Software Inc.Not Vulnerable10-Sep-2004
WatchGuardUnknown1-Sep-2004
Wind River Systems Inc.Unknown1-Sep-2004
WinSCPUnknown1-Sep-2004
WRQNot Vulnerable21-Sep-2004
Zlib.orgVulnerable3-Nov-2004
ZyXELUnknown1-Sep-2004

References


http://secunia.com/advisories/11129/
http://www.openpkg.org/security/OpenPKG-SA-2004.038-zlib.html
http://www.linuxcompatible.org/story33484.html
http://www.securityfocus.com/archive/1/402119

Credit

This vulnerability was reported by OpenPKG.


We thank Mark Adler for providing information about this vulnerability.

This document was written by Jeff Gennari.

Other Information

Date Public:2004-08-25
Date First Published:2004-10-01
Date Last Updated:2005-10-05
CERT Advisory: 
CVE-ID(s):CAN-2004-0797
NVD-ID(s):CAN-2004-0797
US-CERT Technical Alerts: 
Metric:0.66
Document Revision:335

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Copyright 2004 Carnegie Mellon University
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader