01 Record

CVE-2005-2096

zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 5.62% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 92.4% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-07-14.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2005-07-06 04:00Z21 YR AGO
Last updated: 2026-07-14 11:44Z3 MO AGO
Reserved: 2005-06-30
Assigning CNA: redhat
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 5af68853356ec87e810fc268fde5fc836556cd5a1bc2a204766fb6cc483862f2

05 Affected products

VendorProductVersionsPlatforms

redhatenterprise_linuxNot specified—

redhatnetwork_satelliteNot specified—

zlibzlibNot specified—

06 References

sunsolve.sun.com101989http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1vendor-advisoryx_refsource_SUNALERT
www.debian.orgDSA-1026http://www.debian.org/security/2006/dsa-1026vendor-advisoryx_refsource_DEBIAN
secunia.com17236http://secunia.com/advisories/17236third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com20071018 Official Windows binaries of "curl" contain vulnerable zlib 1.2.2 (CAN-2005-2096)http://www.securityfocus.com/archive/1/482505/100/0/threadedmailing-listx_refsource_BUGTRAQ
exchange.xforce.ibmcloud.comhpux-secure-shell-dos(24064)https://exchange.xforce.ibmcloud.com/vulnerabilities/24064vdb-entryx_refsource_XF
lists.apple.comAPPLE-SA-2008-11-13http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.htmlvendor-advisoryx_refsource_APPLE
ftp.freebsd.orgFreeBSD-SA-05:16.zlibftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.ascvendor-advisoryx_refsource_FREEBSD
secunia.com15949http://secunia.com/advisories/15949third-party-advisoryx_refsource_SECUNIA
www.debian.orgDSA-797http://www.debian.org/security/2005/dsa-797vendor-advisoryx_refsource_DEBIAN
www.gentoo.orgGLSA-200509-18http://www.gentoo.org/security/en/glsa/glsa-200509-18.xmlvendor-advisoryx_refsource_GENTOO
securitytracker.com1014398http://securitytracker.com/id?1014398vdb-entryx_refsource_SECTRACK
www.mandriva.comMDKSA-2005:196http://www.mandriva.com/security/advisories?name=MDKSA-2005:196vendor-advisoryx_refsource_MANDRIVA
oval.cisecurity.orgoval:org.mitre.oval:def:1542https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542vdb-entrysignaturex_refsource_OVAL
www.securityfocus.com20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updateshttp://www.securityfocus.com/archive/1/464745/100/0/threadedmailing-listx_refsource_BUGTRAQ
www.ubuntulinux.orgUSN-151-3http://www.ubuntulinux.org/usn/usn-151-3vendor-advisoryx_refsource_UBUNTU
oval.cisecurity.orgoval:org.mitre.oval:def:1262https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262vdb-entrysignaturex_refsource_OVAL
www.securityfocus.com20071021 Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)http://www.securityfocus.com/archive/1/482601/100/0/threadedmailing-listx_refsource_BUGTRAQ
secunia.com18507http://secunia.com/advisories/18507third-party-advisoryx_refsource_SECUNIA
secunia.com17054http://secunia.com/advisories/17054third-party-advisoryx_refsource_SECUNIA
usn.ubuntu.comUSN-148-1https://usn.ubuntu.com/148-1/vendor-advisoryx_refsource_UBUNTU
www.securityfocus.com14162http://www.securityfocus.com/bid/14162vdb-entryx_refsource_BID
www.vmware.comhttp://www.vmware.com/support/vi3/doc/esx-9916286-patch.htmlx_refsource_CONFIRM
www.securityfocus.comHPSBUX02090http://www.securityfocus.com/archive/1/421411/100/0/threadedvendor-advisoryx_refsource_HP
secunia.com31492http://secunia.com/advisories/31492third-party-advisoryx_refsource_SECUNIA
www.mandriva.comMDKSA-2006:070http://www.mandriva.com/security/advisories?name=MDKSA-2006:070vendor-advisoryx_refsource_MANDRIVA
www.redhat.comRHSA-2008:0629http://www.redhat.com/support/errata/RHSA-2008-0629.htmlvendor-advisoryx_refsource_REDHAT
secunia.com17225http://secunia.com/advisories/17225third-party-advisoryx_refsource_SECUNIA
www.vupen.comADV-2007-1267http://www.vupen.com/english/advisories/2007/1267vdb-entryx_refsource_VUPEN
www.vmware.comhttp://www.vmware.com/support/vi3/doc/esx-3616065-patch.htmlx_refsource_CONFIRM
secunia.com18406http://secunia.com/advisories/18406third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com20071029 Windows binary of "Virtual Floppy Drive 2.1" contains vulnerable zlib (CAN-2005-2096)http://www.securityfocus.com/archive/1/482950/100/0/threadedmailing-listx_refsource_BUGTRAQ
secunia.com24788http://secunia.com/advisories/24788third-party-advisoryx_refsource_SECUNIA
www.mandriva.comMDKSA-2005:112http://www.mandriva.com/security/advisories?name=MDKSA-2005:112vendor-advisoryx_refsource_MANDRAKE
secunia.com32706http://secunia.com/advisories/32706third-party-advisoryx_refsource_SECUNIA
oval.cisecurity.orgoval:org.mitre.oval:def:11500https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500vdb-entrysignaturex_refsource_OVAL
secunia.com17326http://secunia.com/advisories/17326third-party-advisoryx_refsource_SECUNIA
www.vupen.comADV-2005-0978http://www.vupen.com/english/advisories/2005/0978vdb-entryx_refsource_VUPEN
www.securityfocus.com20071018 Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)http://www.securityfocus.com/archive/1/482503/100/0/threadedmailing-listx_refsource_BUGTRAQ
www.securityfocus.com20071029 Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)http://www.securityfocus.com/archive/1/482949/100/0/threadedmailing-listx_refsource_BUGTRAQ
lists.apple.comAPPLE-SA-2005-08-15http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlvendor-advisoryx_refsource_APPLE
secunia.com17516http://secunia.com/advisories/17516third-party-advisoryx_refsource_SECUNIA
www.debian.orgDSA-740http://www.debian.org/security/2005/dsa-740vendor-advisoryx_refsource_DEBIAN
www.vupen.comADV-2006-0144http://www.vupen.com/english/advisories/2006/0144vdb-entryx_refsource_VUPEN
support.apple.comhttp://support.apple.com/kb/HT3298x_refsource_CONFIRM
bugzilla.redhat.comhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391x_refsource_MISC
www.redhat.comRHSA-2005:569http://www.redhat.com/support/errata/RHSA-2005-569.htmlvendor-advisoryx_refsource_REDHAT
security.gentoo.orgGLSA-200507-05http://security.gentoo.org/glsa/glsa-200507-05.xmlvendor-advisoryx_refsource_GENTOO
secunia.com19597http://secunia.com/advisories/19597third-party-advisoryx_refsource_SECUNIA
support.avaya.comhttp://support.avaya.com/elmodocs2/security/ASA-2006-016.htmx_refsource_CONFIRM
ftp.sco.comSCOSA-2006.6ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txtvendor-advisoryx_refsource_SCO
secunia.com19550http://secunia.com/advisories/19550third-party-advisoryx_refsource_SECUNIA
secunia.com18377http://secunia.com/advisories/18377third-party-advisoryx_refsource_SECUNIA
lists.apple.comAPPLE-SA-2005-08-17http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlvendor-advisoryx_refsource_APPLE
bugzilla.redhat.comFLSA:162680https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680vendor-advisoryx_refsource_FEDORA
www.kb.cert.orgVU#680620http://www.kb.cert.org/vuls/id/680620third-party-advisoryx_refsource_CERT-VN
www.securityfocus.com20071020 Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)http://www.securityfocus.com/archive/1/482571/100/0/threadedmailing-listx_refsource_BUGTRAQ
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-470355.html

07 Fixed in

Debian 12

aide
Fixed in 0.10-6.1.1
bacula
Fixed in 1.36.3-2
dpkg
Fixed in 1.13.11
dump
Fixed in 0.4b40-1
libphysfs
Fixed in 1.0.0-5
pvpgn
Fixed in 1.7.8-2
rpm
Fixed in 4.0.4-31.1
sash
Fixed in 3.7-6
zlib
Fixed in 1:1.2.2-7
zsync
Fixed in 0.4.0-2

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

aide
Fixed in 0.10-6.1.1
bacula
Fixed in 1.36.3-2
dpkg
Fixed in 1.13.11
dump
Fixed in 0.4b40-1
libphysfs
Fixed in 1.0.0-5
pvpgn
Fixed in 1.7.8-2
rpm
Fixed in 4.0.4-31.1
sash
Fixed in 3.7-6
texmacs
Fixed in 1:1.0.5-3
zlib
Fixed in 1:1.2.2-7
zsync
Fixed in 0.4.0-2

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

aide
Fixed in 0.10-6.1.1
bacula
Fixed in 1.36.3-2
dpkg
Fixed in 1.13.11
dump
Fixed in 0.4b40-1
libphysfs
Fixed in 1.0.0-5
pvpgn
Fixed in 1.7.8-2
rpm
Fixed in 4.0.4-31.1
sash
Fixed in 3.7-6
texmacs
Fixed in 1:1.0.5-3
zlib
Fixed in 1:1.2.2-7
zsync
Fixed in 0.4.0-2

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.