Skip to content

CVE-2005-1849

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash)...

5.0 MediumFix available

CVE-2005-1849 is a medium vulnerability (CVSS 5.0) in Zlib, published July 20, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.08%, the 90th percentile. Fixed in sash 3.7-5sarge1.

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

Exploit likelihood

4.08%Down 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

Record: CVE-2005-1849
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

Record: CVE-2005-1849
Updated: 2026-11-02

EUVDEUVD-2005-1851 No score

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

Record: EUVD-2005-1851
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mm7q-95r6-v3v2 No score

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash)...

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

Record: GHSA-mm7q-95r6-v3v2
Updated: 2026-11-02

OSV No score

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

Record: CVE-2005-1849
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-1849 No score

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

Record: DEBIAN-CVE-2005-1849
Updated: 2026-11-02

Affected products

zlib

Affected packages

Affected packages
Package	Affected	Fixed
`sash` Debian:12	before 3.7-5sarge1	3.7-5sarge1
`sash` Debian:13	before 3.7-5sarge1	3.7-5sarge1
`sash` Debian:14	before 3.7-5sarge1	3.7-5sarge1
`zlib` Debian:12	before 1:1.2.3-1	1:1.2.3-1
`zlib` Debian:13	before 1:1.2.3-1	1:1.2.3-1
`zlib` Debian:14	before 1:1.2.3-1	1:1.2.3-1
`zsync` Debian:12	before 0.4.1-1	0.4.1-1
`zsync` Debian:13	before 0.4.1-1	0.4.1-1
`zsync` Debian:14	before 0.4.1-1	0.4.1-1
`sash` Debian:3.1	before 3.7-5sarge1, plus listed versions 3.7-5	3.7-5sarge1

Show 22 moreShow less

Affected packages
Package	Affected	Fixed
`zlib` Debian:3.1	before 1:1.2.2-4.sarge.2, plus listed versions 1:1.2.2-41:1.2.2-4.sarge.1	1:1.2.2-4.sarge.2
`zsync` Debian:3.1	before 0.3.3-1.sarge.1, plus listed versions 0.3.3-1	0.3.3-1.sarge.1
`zlib` Red Hat:enterprise_linux:4::as	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib-debuginfo` Red Hat:enterprise_linux:4::as	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib-devel` Red Hat:enterprise_linux:4::as	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib` Red Hat:enterprise_linux:4::desktop	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib-devel` Red Hat:enterprise_linux:4::desktop	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib` Red Hat:enterprise_linux:4::es	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib-debuginfo` Red Hat:enterprise_linux:4::es	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib-devel` Red Hat:enterprise_linux:4::es	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib` Red Hat:enterprise_linux:4::ws	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`zlib-devel` Red Hat:enterprise_linux:4::ws	before 0:1.2.1.2-1.2	0:1.2.1.2-1.2
`rhn-solaris-bootstrap` Red Hat:network_satellite:5.0:el4	before 0:5.0.2-3	0:5.0.2-3
`rhn_solaris_bootstrap_5_0_2_3` Red Hat:network_satellite:5.0:el4	before 0:1-0	0:1-0
`rhn-solaris-bootstrap` Red Hat:network_satellite:4.2::el3	before 0:5.0.2-3	0:5.0.2-3
`rhn_solaris_bootstrap_5_0_2_3` Red Hat:network_satellite:4.2::el3	before 0:1-0	0:1-0
`rhn-solaris-bootstrap` Red Hat:network_satellite:4.2::el4	before 0:5.0.2-3	0:5.0.2-3
`rhn_solaris_bootstrap_5_0_2_3` Red Hat:network_satellite:4.2::el4	before 0:1-0	0:1-0
`rhn-solaris-bootstrap` Red Hat:network_satellite:5.1::el4	before 0:5.1.1-3	0:5.1.1-3
`rhn_solaris_bootstrap_5_1_1_3` Red Hat:network_satellite:5.1::el4	before 0:1-0	0:1-0

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 87 moreShow less