Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009.

A Buffer overflow in perl, in the base Compress::Raw::Zlib perl module has been fixed. (CVE-2009-1391)

Additionaly three non security bugs were fixed.

The remote host is affected by the vulnerability described in GLSA-200908-07 (Perl Compress::Raw modules: Denial of Service)

    Leo Bergolth reported an off-by-one error in the inflate() function in     Zlib.xs of Compress::Raw::Zlib, possibly leading to a heap-based buffer     overflow (CVE-2009-1391).
    Paul Marquess discovered a similar vulnerability in the bzinflate()     function in Bzip2.xs of Compress::Raw::Bzip2 (CVE-2009-1884).
  Impact :

    A remote attacker might entice a user or automated system (for instance     running SpamAssassin or AMaViS) to process specially crafted files,     possibly resulting in a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

A vulnerability has been found and corrected in perl-Compress-Raw-Zlib :

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009 (CVE-2009-1391).

This update provides fixes for this vulnerability.

Update :

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

This security update fixes an off-by-one overflow in Compress::Raw::Zlib (CVE-2009-1391) Moreover, it contains a subtle change to the configuration that does not affect the Perl interpreter itself, but fixes the propagation of the chosen options to the modules. For example, a rebuild of perl-Wx against perl-5.10.0-73 will fix bug 508496.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that the Compress::Raw::Zlib Perl module incorrectly handled certain zlib compressed streams. If a user or automated system were tricked into processing a specially crafted compressed stream or file, a remote attacker could crash the application, leading to a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A Buffer overflow in the Compress::Raw::Zlib perl module has been fixed. (CVE-2009-1391)

ID	Name	Product	Family	Severity
41448	SuSE 11 Security Update : Perl (SAT Patch Number 994)	Nessus	SuSE Local Security Checks	medium
40632	GLSA-200908-07 : Perl Compress::Raw modules: Denial of Service	Nessus	Gentoo Local Security Checks	medium
40296	openSUSE Security Update : perl (perl-995)	Nessus	SuSE Local Security Checks	medium
40106	openSUSE Security Update : perl (perl-995)	Nessus	SuSE Local Security Checks	medium
39874	Mandriva Linux Security Advisory : perl-Compress-Raw-Zlib (MDVSA-2009:157-1)	Nessus	Mandriva Local Security Checks	medium
39847	Fedora 10 : perl-5.10.0-73.fc10 (2009-7680)	Nessus	Fedora Local Security Checks	medium
39600	Ubuntu 8.04 LTS / 8.10 / 9.04 : libcompress-raw-zlib-perl, perl vulnerability (USN-794-1)	Nessus	Ubuntu Local Security Checks	medium
39499	openSUSE 10 Security Update : perl-Compress-Raw-Zlib (perl-Compress-Raw-Zlib-6300)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2009-1391

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium