| Package | Affected versions | Patched versions |
|---|---|---|
| gzip | = 1.2.4= 1.2.4a= 1.3= 1.3.1= 1.3.10= 1.3.11= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.3.6= 1.3.7= 1.3.8= 1.3.9≤ 1.3.12 |
The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service (application crash or infinite loop) or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a CVE-2006-4334 regression.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free