{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2005-1849","sourceIdentifier":"security@debian.org","published":"2005-07-26T04:00:00.000","lastModified":"2026-06-16T22:13:47.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced."},{"lang":"es","value":"inftrees.h en zlib 1.2.2 permite que atacantes remotos realizen una dengación de servicio (caída de la aplicación) mediante un fichero inválido que hace que se produzca un arbol dinámico muy grande."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zlib:zlib:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C77C974-9A8A-4F22-A680-5095552589BB"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt","source":"security@debian.org"},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"security@debian.org"},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"security@debian.org"},{"url":"http://secunia.com/advisories/16137","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/17326","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/17516","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/18377","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/19334","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/19550","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/19597","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/24788","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31492","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz","source":"security@debian.org"},{"url":"http://securitytracker.com/id?1014540","source":"security@debian.org"},{"url":"http://www.debian.org/security/2005/dsa-763","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-797","source":"security@debian.org"},{"url":"http://www.debian.org/security/2006/dsa-1026","source":"security@debian.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml","source":"security@debian.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200603-18.xml","source":"security@debian.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:196","source":"security@debian.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:070","source":"security@debian.org"},{"url":"http://www.novell.com/linux/security/advisories/2005_43_zlib.html","source":"security@debian.org"},{"url":"http://www.osvdb.org/18141","source":"security@debian.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-584.html","source":"security@debian.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"security@debian.org"},{"url":"http://www.securityfocus.com/archive/1/464745/100/0/threaded","source":"security@debian.org"},{"url":"http://www.securityfocus.com/bid/14340","source":"security@debian.org"},{"url":"http://www.ubuntulinux.org/usn/usn-151-3","source":"security@debian.org"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html","source":"security@debian.org"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html","source":"security@debian.org"},{"url":"http://www.vupen.com/english/advisories/2007/1267","source":"security@debian.org"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680","source":"security@debian.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21456","source":"security@debian.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402","source":"security@debian.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/16137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/17326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/17516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/18377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/19334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/19550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/19597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/24788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1014540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200603-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2005_43_zlib.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/18141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/464745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/14340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntulinux.org/usn/usn-151-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}