CVE-2005-2096
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a...
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
Exploit likelihood
What each source reports
NVD Score used
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
- Record
CVE-2005-2096- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
- Record
CVE-2005-2096- Updated
- 2026-11-02
EUVDEUVD-2005-2097 No score
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
- Record
EUVD-2005-2097- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w2qv-rhm9-97p2 No score
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a...
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
- Record
GHSA-w2qv-rhm9-97p2- Updated
- 2026-11-02
OSV No score
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
- Record
CVE-2005-2096- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2096 No score
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
- Record
DEBIAN-CVE-2005-2096- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10580-1 No score
httrack-3.48.22-1.3 on GA media
These are all security issues fixed in the httrack-3.48.22-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10580-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
aideDebian:12 |
before 0.10-6.1.1 | 0.10-6.1.1 |
aideDebian:13 |
before 0.10-6.1.1 | 0.10-6.1.1 |
aideDebian:14 |
before 0.10-6.1.1 | 0.10-6.1.1 |
baculaDebian:12 |
before 1.36.3-2 | 1.36.3-2 |
baculaDebian:13 |
before 1.36.3-2 | 1.36.3-2 |
baculaDebian:14 |
before 1.36.3-2 | 1.36.3-2 |
dpkgDebian:12 |
before 1.13.11 | 1.13.11 |
dpkgDebian:13 |
before 1.13.11 | 1.13.11 |
dpkgDebian:14 |
before 1.13.11 | 1.13.11 |
dumpDebian:12 |
before 0.4b40-1 | 0.4b40-1 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
dumpDebian:13 |
before 0.4b40-1 | 0.4b40-1 |
dumpDebian:14 |
before 0.4b40-1 | 0.4b40-1 |
libphysfsDebian:12 |
before 1.0.0-5 | 1.0.0-5 |
libphysfsDebian:13 |
before 1.0.0-5 | 1.0.0-5 |
libphysfsDebian:14 |
before 1.0.0-5 | 1.0.0-5 |
pvpgnDebian:12 |
before 1.7.8-2, plus listed versions 1.6.4+20040826-11.6.4+20040826-21.7.7-11.7.8-1 |
1.7.8-2 |
pvpgnDebian:13 |
before 1.7.8-2, plus listed versions 1.6.4+20040826-11.6.4+20040826-21.7.7-11.7.8-1 |
1.7.8-2 |
pvpgnDebian:14 |
before 1.7.8-2, plus listed versions 1.6.4+20040826-11.6.4+20040826-21.7.7-11.7.8-1 |
1.7.8-2 |
rpmDebian:12 |
before 4.0.4-31.1 | 4.0.4-31.1 |
rpmDebian:13 |
before 4.0.4-31.1 | 4.0.4-31.1 |
rpmDebian:14 |
before 4.0.4-31.1 | 4.0.4-31.1 |
sashDebian:12 |
before 3.7-6 | 3.7-6 |
sashDebian:13 |
before 3.7-6 | 3.7-6 |
sashDebian:14 |
before 3.7-6 | 3.7-6 |
texmacsDebian:13 |
before 1:1.0.5-3 | 1:1.0.5-3 |
texmacsDebian:14 |
before 1:1.0.5-3 | 1:1.0.5-3 |
zlibDebian:12 |
before 1:1.2.2-7 | 1:1.2.2-7 |
zlibDebian:13 |
before 1:1.2.2-7 | 1:1.2.2-7 |
zlibDebian:14 |
before 1:1.2.2-7 | 1:1.2.2-7 |
zsyncDebian:12 |
before 0.4.0-2 | 0.4.0-2 |
zsyncDebian:13 |
before 0.4.0-2 | 0.4.0-2 |
zsyncDebian:14 |
before 0.4.0-2 | 0.4.0-2 |
sashDebian:3.1 |
before 3.7-5sarge1, plus listed versions 3.7-5 |
3.7-5sarge1 |
zlibDebian:3.1 |
before 1:1.2.2-4.sarge.1, plus listed versions 1:1.2.2-4 |
1:1.2.2-4.sarge.1 |
zsyncDebian:3.1 |
before 0.3.3-1.sarge.1, plus listed versions 0.3.3-1 |
0.3.3-1.sarge.1 |
zlibRed Hat:enterprise_linux:4::as |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlib-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlib-develRed Hat:enterprise_linux:4::as |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlibRed Hat:enterprise_linux:4::desktop |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlib-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlib-develRed Hat:enterprise_linux:4::desktop |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlibRed Hat:enterprise_linux:4::es |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlib-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlib-develRed Hat:enterprise_linux:4::es |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlibRed Hat:enterprise_linux:4::ws |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlib-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
zlib-develRed Hat:enterprise_linux:4::ws |
before 0:1.2.1.2-1.1 | 0:1.2.1.2-1.1 |
rhn-solaris-bootstrapRed Hat:network_satellite:5.0:el4 |
before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:5.0:el4 |
before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:4.2::el3 |
before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:4.2::el3 |
before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:4.2::el4 |
before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:4.2::el4 |
before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:5.1::el4 |
before 0:5.1.1-3 | 0:5.1.1-3 |
rhn_solaris_bootstrap_5_1_1_3Red Hat:network_satellite:5.1::el4 |
before 0:1-0 | 0:1-0 |
httrackopenSUSE:Tumbleweed |
before 3.48.22-1.3 | 3.48.22-1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2096 is a high vulnerability (CVSS 7.5) in Zlib, published July 6, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.63%, the 92nd percentile. Fixed in aide 0.10-6.1.1.
References
sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1
debian.org/security/2006/dsa-1026
secunia.com/advisories/17236
securityfocus.com/archive/1/482505/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/24064
lists.apple.com/archives/security-announce//2008/Nov/msg00001.html
Show 113 moreShow less
gentoo.org/security/en/glsa/glsa-200509-18.xml
securitytracker.com/id?1014398
mandriva.com/security/advisories?name=MDKSA-2005:196
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542
ubuntulinux.org/usn/usn-151-3
usn.ubuntu.com/148-1
vmware.com/support/vi3/doc/esx-9916286-patch.html
redhat.com/support/errata/RHSA-2008-0629.html
vupen.com/english/advisories/2007/1267
support.apple.com/kb/HT3298
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391
security.gentoo.org/glsa/glsa-200507-05.xml
support.avaya.com/elmodocs2/security/ASA-2006-016.htm
kb.cert.org/vuls/id/680620
cert-portal.siemens.com/productcert/html/ssa-470355.html
nvd.nist.gov/vuln/detail/CVE-2005-2096
github.com/advisories/GHSA-w2qv-rhm9-97p2
security-tracker.debian.org/tracker/CVE-2005-2096
access.redhat.com/errata/RHSA-2005:569
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_569.json
cve.org/CVERecord?id=CVE-2005-2096
suse.com/security/cve/CVE-2004-0797