Vulnerability Report

CVE-2005-1849

Title: Zlib Denial of Service (DoS)

Denial of Service (DoS)

Proof Of Concept

No public PoC currently indexed for CVE-2005-1849.

CWE Category NVD-CWE-noinfo
Published Date Jul 26, 2005
Modified Date Apr 03, 2025
Exploit Status Not Found
Score 5.0 CVSS v2.0
Exploit Probability (EPSS)
7.99%

Vulnerability Summary

CVE-2005-1849: inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

Impacted Vendors

Z
zlib 1
C
cloudflare 1

Reference Links

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html http://secunia.com/advisories/16137 http://secunia.com/advisories/17326 http://secunia.com/advisories/17516 http://secunia.com/advisories/18377 http://secunia.com/advisories/19334 http://secunia.com/advisories/19550 http://secunia.com/advisories/19597 http://secunia.com/advisories/24788 http://secunia.com/advisories/31492 http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz http://securitytracker.com/id?1014540 http://www.debian.org/security/2005/dsa-763 http://www.debian.org/security/2005/dsa-797 http://www.debian.org/security/2006/dsa-1026 http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml http://www.gentoo.org/security/en/glsa/glsa-200603-18.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:196 http://www.mandriva.com/security/advisories?name=MDKSA-2006:070 http://www.novell.com/linux/security/advisories/2005_43_zlib.html http://www.osvdb.org/18141 http://www.redhat.com/support/errata/RHSA-2005-584.html http://www.redhat.com/support/errata/RHSA-2008-0629.html http://www.securityfocus.com/archive/1/464745/100/0/threaded http://www.securityfocus.com/bid/14340 http://www.ubuntulinux.org/usn/usn-151-3 http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html http://www.vupen.com/english/advisories/2007/1267 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680 https://exchange.xforce.ibmcloud.com/vulnerabilities/21456 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html http://secunia.com/advisories/16137 http://secunia.com/advisories/17326 http://secunia.com/advisories/17516 http://secunia.com/advisories/18377 http://secunia.com/advisories/19334 http://secunia.com/advisories/19550 http://secunia.com/advisories/19597 http://secunia.com/advisories/24788 http://secunia.com/advisories/31492 http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz http://securitytracker.com/id?1014540 http://www.debian.org/security/2005/dsa-763 http://www.debian.org/security/2005/dsa-797 http://www.debian.org/security/2006/dsa-1026 http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml http://www.gentoo.org/security/en/glsa/glsa-200603-18.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:196 http://www.mandriva.com/security/advisories?name=MDKSA-2006:070 http://www.novell.com/linux/security/advisories/2005_43_zlib.html http://www.osvdb.org/18141 http://www.redhat.com/support/errata/RHSA-2005-584.html http://www.redhat.com/support/errata/RHSA-2008-0629.html http://www.securityfocus.com/archive/1/464745/100/0/threaded http://www.securityfocus.com/bid/14340 http://www.ubuntulinux.org/usn/usn-151-3 http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html http://www.vupen.com/english/advisories/2007/1267 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680 https://exchange.xforce.ibmcloud.com/vulnerabilities/21456 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
5.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:N/I:N/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2005-1849 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected Stack

No specific products linked.