GZ
Product
gzip
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add gzip to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-1271 | 8.8 | Aug 31 | An arbitrary file write vulnerability was found in GNU gzip's zgrep utility Affected: before 1.12 |
| CVE-2026-41992 | 7.5 | Jun 29 | Global Buffer Overflow in GNU gzip Affected: through 1.14 |
| CVE-2026-41991 | 4.7 | Jun 29 | Predictable Temporary File in GNU gzip Affected: through 1.14 |
| CVE-2010-0001 | – | Jan 29 | Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of… Affected: through 1.3.13; 1.2.4; 1.2.4a; 1.3; 1.3.1; 1.3.2; +10 more |
| CVE-2009-2624 | – | Jan 29 | The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service… Affected: through 1.3.12; 1.2.4; 1.2.4a; 1.3; 1.3.1; 1.3.2; +9 more |
| CVE-2005-0758 | – | May 13 | zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script Affected: before 1.3.5 |
| CVE-2005-1228 | – | May 2 | Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a Affected: 1.2.4; 1.3.3 |
| CVE-2005-0988 | – | May 2 | Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file… Affected: 1.2.4; 1.2.4a; 1.3.3 |
| CVE-2004-0970 | – | Feb 9 | The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on… Affected: 1.2.4a |
| CVE-2004-0603 | – | Dec 6 | gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users… Affected: through 1.3.3 |
| CVE-2004-1349 | – | Oct 4 | gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to… Affected: before 1.3 |
| CVE-2003-0367 | – | Jul 2 | znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files Affected: through 1.3.5 |
| CVE-2001-1228 | – | Nov 18 | Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server Affected: 1.2.4; 1.2.4a; 1.3 |
Showing 13