CVE-2022-37434

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

• Apple iPadOS

  OS
  Apple
  < 15.7.1

• Apple iOS

  OS
  Apple
  16.0 – 16.1 (excl.)< 15.7.1

• Apple macOS

  OS
  Apple
  12.0.0 – 12.6.1 (excl.)11.0 – 11.7.1 (excl.)

• Apple watchOS

  OS
  Apple
  < 9.1

• Debian

  OS
  Debian
  10.0

• Fedora Project Fedora

  OS
  Fedoraproject
  353637

• Netapp Active Iq Unified Manager

  APP
  Netapp
  all versions

• Netapp H300s

  HW
  Netapp
  all versions

• Netapp H300s Firmware

  OS
  Netapp
  all versions

• Netapp H500s

  HW
  Netapp
  all versions

• Netapp H500s Firmware

  OS
  Netapp
  all versions

• Netapp H700s

  HW
  Netapp
  all versions

• Netapp H700s Firmware

  OS
  Netapp
  all versions

• Netapp Hci

  APP
  Netapp
  all versions

• Netapp Hci Compute Node

  HW
  Netapp
  all versions

• Netapp Management Services For Element Software

  APP
  Netapp
  all versions

• Netapp Oncommand Workflow Automation

  APP
  Netapp
  all versions

• Netapp Ontap Select Deploy Administration Utility

  APP
  Netapp
  all versions

• Netapp Storagegrid

  APP
  Netapp
  all versions

• Stormshield Network Security

  APP
  Stormshield
  4.6.0 – 4.6.3 (excl.)3.7.31 – 3.7.34 (excl.)3.11.0 – 3.11.22 (excl.)4.3.0 – 4.3.16 (excl.)

• Zlib

  APP
  Zlib
  ≤ 1.2.12