CVE-2023-6992

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-6992
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6992.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-6992
Aliases
  • GHSA-vww9-j87r-4cqh
Downstream
ALPINE (1)
AZL (10)
CLSA (1)
Published
2024-01-04T11:11:07Z
Modified
2026-10-28T02:31:08Z
Severity
  • 4.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
Summary
Memory corruption issues is Cloudflare zlib implementation
Details

Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression using a crafted malicious file potentially leading to denial of service of the software. Patches: The issue has been patched in commit 8352d10 https://github.com/cloudflare/zlib/commit/8352d108c05db1bdc5ac3bdf834dad641694c13c . The upstream repository is not affected.

Database specific 
{
    "cna_assigner": "cloudflare",
    "cwe_ids": [
        "CWE-122",
        "CWE-126",
        "CWE-20"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6992.json"
}
References

Affected packages

Git / github.com/cloudflare/zlib

Affected ranges

Type
GIT
Repo
https://github.com/cloudflare/zlib
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8352d10
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "8352d10"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "8352d10"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6992.json"