CVE-2005-1849
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash)...
5.0 MediumFix available
CVE-2005-1849 is a medium vulnerability (CVSS 5.0) in Zlib, published July 20, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.08%, the 90th percentile. Fixed in sash 3.7-5sarge1.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 4.08%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.7-5sarge1sash +31 more
Description
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
Exploit likelihood
4.08%Down 0.3 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sashDebian:12 | before 3.7-5sarge1 | 3.7-5sarge1 |
sashDebian:13 | before 3.7-5sarge1 | 3.7-5sarge1 |
sashDebian:14 | before 3.7-5sarge1 | 3.7-5sarge1 |
zlibDebian:12 | before 1:1.2.3-1 | 1:1.2.3-1 |
zlibDebian:13 | before 1:1.2.3-1 | 1:1.2.3-1 |
zlibDebian:14 | before 1:1.2.3-1 | 1:1.2.3-1 |
zsyncDebian:12 | before 0.4.1-1 | 0.4.1-1 |
zsyncDebian:13 | before 0.4.1-1 | 0.4.1-1 |
zsyncDebian:14 | before 0.4.1-1 | 0.4.1-1 |
sashDebian:3.1 From an advisory covering 2 CVEs | before 3.7-5sarge1, plus listed versions 3.7-5 | 3.7-5sarge1 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
zlibDebian:3.1 | before 1:1.2.2-4.sarge.2, plus listed versions 1:1.2.2-41:1.2.2-4.sarge.1 | 1:1.2.2-4.sarge.2 |
zsyncDebian:3.1 From an advisory covering 2 CVEs | before 0.3.3-1.sarge.1, plus listed versions 0.3.3-1 | 0.3.3-1.sarge.1 |
zlibRed Hat:enterprise_linux:4::as | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlib-debuginfoRed Hat:enterprise_linux:4::as | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlib-develRed Hat:enterprise_linux:4::as | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlibRed Hat:enterprise_linux:4::desktop | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlib-debuginfoRed Hat:enterprise_linux:4::desktop | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlib-develRed Hat:enterprise_linux:4::desktop | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlibRed Hat:enterprise_linux:4::es | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlib-debuginfoRed Hat:enterprise_linux:4::es | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlib-develRed Hat:enterprise_linux:4::es | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlibRed Hat:enterprise_linux:4::ws | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlib-debuginfoRed Hat:enterprise_linux:4::ws | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
zlib-develRed Hat:enterprise_linux:4::ws | before 0:1.2.1.2-1.2 | 0:1.2.1.2-1.2 |
rhn-solaris-bootstrapRed Hat:network_satellite:5.0:el4 From an advisory covering 12 CVEs | before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:5.0:el4 From an advisory covering 12 CVEs | before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:4.2::el3 From an advisory covering 12 CVEs | before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:4.2::el3 From an advisory covering 12 CVEs | before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:4.2::el4 From an advisory covering 12 CVEs | before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:4.2::el4 From an advisory covering 12 CVEs | before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:5.1::el4 From an advisory covering 12 CVEs | before 0:5.1.1-3 | 0:5.1.1-3 |
rhn_solaris_bootstrap_5_1_1_3Red Hat:network_satellite:5.1::el4 From an advisory covering 12 CVEs | before 0:1-0 | 0:1-0 |
What each source reports
NVD Score used
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
- Record
CVE-2005-1849- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
- Record
CVE-2005-1849- Updated
- 2026-11-02
EUVDEUVD-2005-1851No score
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
- Record
EUVD-2005-1851- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mm7q-95r6-v3v2No score
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash)...
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
- Record
GHSA-mm7q-95r6-v3v2- Updated
- 2026-11-02
OSVNo score
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
- Record
CVE-2005-1849- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-1849No score
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
- Record
DEBIAN-CVE-2005-1849- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/21456
debian.org/security/2006/dsa-1026
secunia.com/advisories/19334
gentoo.org/security/en/glsa/glsa-200509-18.xml
Show 87 moreShow less
mandriva.com/security/advisories?name=MDKSA-2005:196
security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz
securityfocus.com/archive/1/464745/100/0/threaded
ubuntulinux.org/usn/usn-151-3
redhat.com/support/errata/RHSA-2005-584.html
vmware.com/support/vi3/doc/esx-9916286-patch.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402
osvdb.org/18141
securitytracker.com/id?1014540
novell.com/linux/security/advisories/2005_43_zlib.html
vupen.com/english/advisories/2007/1267
lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680
nvd.nist.gov/vuln/detail/CVE-2005-1849
github.com/advisories/GHSA-mm7q-95r6-v3v2
security-tracker.debian.org/tracker/CVE-2005-1849
access.redhat.com/errata/RHSA-2005:584
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_584.json
cve.org/CVERecord?id=CVE-2005-1849