CVE Feed

    Dashboard / CVE / CVE-2004-0797

    CVE-2004-0797

    The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).

    Published:Sep 14, 2004
    Last Modified:Apr 16, 2026
    EPS:Sep 14, 2004
    EPSS Score:0.02112
    CVSS Score:2.1

    Affected Products

    Vendor
    Zlib
    Product
    Zlib

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-85091 (CVSS 8.3) — zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function w…
    CVE-2026-27171 (CVSS 2.9) — zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do ri…
    CVE-2026-22184 (CVSS 4.6) — zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under …
    CVE-2025-0725 (CVSS 7.3) — When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURL…
    CVE-2023-45853 (CVSS 9.8) — MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFile…
    CVE-2022-37434 (CVSS 9.8) — zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large g…
    CVE-2018-25032 (CVSS 7.5) — zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many dist…
    CVE-2016-9843 (CVSS 9.8) — The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified im…
    CVE-2016-9840 (CVSS 8.8) — inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging impr…
    CVE-2016-9841 (CVSS 9.8) — inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging impro…

    References

    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt
    ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.17/SCOSA-2004.17.txt
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=252253
    http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000865
    http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000878
    http://marc.info/?l=bugtraq&m=109353792914900&w=2
    http://secunia.com/advisories/11129
    http://secunia.com/advisories/17054
    http://secunia.com/advisories/18377
    http://security.gentoo.org/glsa/glsa-200408-26.xml
    http://securitytracker.com/id?1011085
    http://www.kb.cert.org/vuls/id/238678
    http://www.mandriva.com/security/advisories?name=MDKSA-2004:090
    http://www.novell.com/linux/security/advisories/2004_29_zlib.html
    http://www.osvdb.org/9360
    http://www.osvdb.org/9361
    http://www.securityfocus.com/bid/11051
    http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.319160
    https://bugzilla.fedora.us/show_bug.cgi?id=2043
    https://exchange.xforce.ibmcloud.com/vulnerabilities/17119
    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt
    ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.17/SCOSA-2004.17.txt
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=252253
    http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000865
    http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000878
    http://marc.info/?l=bugtraq&m=109353792914900&w=2
    http://secunia.com/advisories/11129
    http://secunia.com/advisories/17054
    http://secunia.com/advisories/18377
    http://security.gentoo.org/glsa/glsa-200408-26.xml
    http://securitytracker.com/id?1011085
    http://www.kb.cert.org/vuls/id/238678
    http://www.mandriva.com/security/advisories?name=MDKSA-2004:090
    http://www.novell.com/linux/security/advisories/2004_29_zlib.html
    http://www.osvdb.org/9360
    http://www.osvdb.org/9361
    http://www.securityfocus.com/bid/11051
    http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.319160
    https://bugzilla.fedora.us/show_bug.cgi?id=2043
    https://exchange.xforce.ibmcloud.com/vulnerabilities/17119

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High