CVE ID:	CVE-2022-37434
Description:	zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2023.1211   1.3.6.1.4.1.25623.1.1.12.2022.5570.2   1.3.6.1.4.1.25623.1.1.13.2022.288.01   1.3.6.1.4.1.25623.1.1.2.2022.2715   1.3.6.1.4.1.25623.1.1.10.2022.0328   1.3.6.1.4.1.25623.1.1.2.2022.2752   1.3.6.1.4.1.25623.1.0.884277   1.3.6.1.4.1.25623.1.0.854932   1.3.6.1.4.1.25623.1.1.2.2022.2485   1.3.6.1.4.1.25623.1.0.149535   1.3.6.1.4.1.25623.1.0.822448   1.3.6.1.4.1.25623.1.1.2.2022.2924   1.3.6.1.4.1.25623.1.0.705218   1.3.6.1.4.1.25623.1.1.2.2022.2705   1.3.6.1.4.1.25623.1.1.4.2022.2845.1   1.3.6.1.4.1.25623.1.1.4.2022.2947.1   1.3.6.1.4.1.25623.1.0.845484   1.3.6.1.4.1.25623.1.1.2.2022.2950   1.3.6.1.4.1.25623.1.1.2.2022.2641   1.3.6.1.4.1.25623.1.0.149536   1.3.6.1.4.1.25623.1.1.2.2022.2673   1.3.6.1.4.1.25623.1.0.845486   1.3.6.1.4.1.25623.1.1.2.2022.2787   1.3.6.1.4.1.25623.1.1.2.2023.2205   1.3.6.1.4.1.25623.1.1.4.2022.2847.1   1.3.6.1.4.1.25623.1.1.2.2023.1241   1.3.6.1.4.1.25623.1.0.822477   1.3.6.1.4.1.25623.1.1.4.2022.2846.1   1.3.6.1.4.1.25623.1.0.893103   1.3.6.1.4.1.25623.1.0.822390
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-37434 20221030 APPLE-SA-2022-10-27-1 iOS 15.7.1 and iPadOS 15.7.1 http://seclists.org/fulldisclosure/2022/Oct/37 20221030 APPLE-SA-2022-10-27-2 Additional information for APPLE-SA-2022-10-24-1 iOS 16.1 and iPadOS 16 http://seclists.org/fulldisclosure/2022/Oct/38 20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 http://seclists.org/fulldisclosure/2022/Oct/41 20221030 APPLE-SA-2022-10-27-6 Additional information for APPLE-SA-2022-10-24-3 macOS Monterey 12.6.1 http://seclists.org/fulldisclosure/2022/Oct/42 DSA-5218 https://www.debian.org/security/2022/dsa-5218 FEDORA-2022-0b517a5397 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/ FEDORA-2022-15da0cf165 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/ FEDORA-2022-25e4dbedf9 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/ FEDORA-2022-3c28ae0cd8 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/ FEDORA-2022-b8232d1cca https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/ [debian-lts-announce] 20220912 [SECURITY] [DLA 3103-1] zlib security update https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html [oss-security] 20220805 zlib buffer overflow http://www.openwall.com/lists/oss-security/2022/08/05/2 [oss-security] 20220808 Re: zlib buffer overflow http://www.openwall.com/lists/oss-security/2022/08/09/1 https://github.com/curl/curl/issues/9271 https://github.com/curl/curl/issues/9271 https://github.com/ivd38/zlib_overflow https://github.com/ivd38/zlib_overflow https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063 https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063 https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1 https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1 https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764 https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764 https://security.netapp.com/advisory/ntap-20220901-0005/ https://security.netapp.com/advisory/ntap-20220901-0005/ https://support.apple.com/kb/HT213488 https://support.apple.com/kb/HT213488 https://support.apple.com/kb/HT213489 https://support.apple.com/kb/HT213489 https://support.apple.com/kb/HT213490 https://support.apple.com/kb/HT213490 https://support.apple.com/kb/HT213491 https://support.apple.com/kb/HT213491 https://support.apple.com/kb/HT213493 https://support.apple.com/kb/HT213493 https://support.apple.com/kb/HT213494 https://support.apple.com/kb/HT213494