GLSA-200508-01 : Compress::Zlib: Buffer overflow
High Nessus Plugin ID 19361
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-200508-01 (Compress::Zlib: Buffer overflow)
Compress::Zlib 1.34 contains a local vulnerable version of zlib, which may lead to a buffer overflow.
By creating a specially crafted compressed data stream, attackers can overwrite data structures for applications that use Compress::Zlib, resulting in a Denial of Service and potentially arbitrary code execution.
There is no known workaround at this time.
SolutionAll Compress::Zlib users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=perl-core/Compress-Zlib-1.35'