PatchTheCVEgzip vulnerabilities
Recent CVEs affecting gzip products. 5 tracked.
gzip has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-09-19. Highest priority: CVE-2006-4337 (score 50/100).
- CVE-2006-4338 MEDIUM 5.0 DOWNGRADE unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (in
- CVE-2006-4337 HIGH 7.5 DOWNGRADE Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attacke
- CVE-2006-4336 HIGH 7.5 DOWNGRADE Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to ex
- CVE-2006-4335 HIGH 7.5 DOWNGRADE Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when
- CVE-2006-4334 MEDIUM 5.0 DOWNGRADE Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash
FAQ
How do I fix gzip vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gzip being exploited right now?
None of the tracked gzip CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gzip CVE should I patch first?
CVE-2006-4337 currently ranks highest (50/100): Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attacke.