CVE-2005-1849: zlib

EPSS trend

Probability

4.08%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.08% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

References

42 links

exchange.xforce.ibmcloud.com/vulnerabilities/21456VDB EntryX Refsource XF
www.debian.org/security/2006/dsa-1026Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/19334Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2005/dsa-797Vendor AdvisoryX Refsource DEBIAN
www.debian.org/security/2005/dsa-763Vendor AdvisoryX Refsource DEBIANPatch
www.gentoo.org/security/en/glsa/glsa-200509-18.xmlVendor AdvisoryX Refsource GENTOO
www.mandriva.com/security/advisories?name=MDKSA-2005:196Vendor AdvisoryX Refsource MANDRIVA
security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gzX Refsource MISC
www.securityfocus.com/archive/1/464745/100/0/threadedMailing ListX Refsource BUGTRAQ
www.ubuntulinux.org/usn/usn-151-3Vendor AdvisoryX Refsource UBUNTU

Show all 42 references

www.gentoo.org/security/en/glsa/glsa-200603-18.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2005-584.htmlVendor AdvisoryX Refsource REDHAT
www.vmware.com/support/vi3/doc/esx-9916286-patch.htmlX Refsource CONFIRM
secunia.com/advisories/16137Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/31492Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402VDB EntrySignatureX Refsource OVAL
www.osvdb.org/18141VDB EntryX Refsource OSVDB
securitytracker.com/id?1014540VDB EntryX Refsource SECTRACK
www.novell.com/linux/security/advisories/2005_43_zlib.htmlVendor AdvisoryX Refsource SUSE
www.mandriva.com/security/advisories?name=MDKSA-2006:070Vendor AdvisoryX Refsource MANDRIVA
www.redhat.com/support/errata/RHSA-2008-0629.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2007/1267VDB EntryX Refsource VUPEN
www.vmware.com/support/vi3/doc/esx-3616065-patch.htmlX Refsource CONFIRM
secunia.com/advisories/24788Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17326Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/17516Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/14340VDB EntryX Refsource BID
secunia.com/advisories/19597Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/19550Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18377Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlVendor AdvisoryX Refsource APPLE
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680Vendor AdvisoryX Refsource FEDORA
access.redhat.com/errata/RHSA-2005:584Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=163037REPORT
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_584.jsonAdvisory
access.redhat.com/security/cve/CVE-2005-1849REPORT
bugzilla.redhat.com/show_bug.cgi?id=430649REPORT
www.cve.org/CVERecord?id=CVE-2005-1849Advisory
nvd.nist.gov/vuln/detail/CVE-2005-1849Advisory
security-tracker.debian.org/tracker/CVE-2005-1849Advisory

Related vulnerabilities

PrioritiseCVE-2026-85091zlib +16 more2mo agozlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacatezlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.CVSS8.3HighEPSS0.47%PrioritiseCVE-2026-76844zlib +11 more2mo agozlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Writezlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call.CVSS8.3HighEPSS0.59%RoutineCVE-2026-27171zlib +14 more8mo agozlib zlibzlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.CVSS5.5MediumEPSS0.25%RoutineCVE-2026-22184zlib software · zlib +9 more10mo agozlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.CVSS8.6HighEPSS0.41%RoutineCVE-2023-45853smihica · pyminizip +32 more3y agosmihica pyminizipMiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.CVSS9.8CriticalEPSS3.45%PrioritiseCVE-2022-37434apple · ipados +78 more4y agoapple ipadoszlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).CVSS9.8CriticalEPSS19.24%

All vulnerabilities inzlib

CVE-2005-1849: zlib

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References