Vulnerability in Gzip

CVE-2006-4338

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.

EPSS: 0.036 (88.3th percentile) — read the EPSS interpretation.

Affected products

  • Gzip — versions 1.3.5
  • N/a — versions n/a

References