CVE-2005-2096

Aliases:DEBIAN-CVE-2005-2096
Advisory lineage Upstream: 0 Downstream: 9
Modified
Published: 06 Jul 2005, 04:00
Last modified:14 Jul 2026, 11:44

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.5 HIGH
v2.0 (nvd)
EPSS Score
5.63% LOW
6% probability -37.41%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Jul 2005, 04:00
Published
Vulnerability first disclosed
14 Jul 2026, 11:44
Last Modified
Vulnerability information updated

Description

zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.

CVSS Metrics

  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 5.63%• Percentile: 93%

Affected Systems

  • debian•aide

    < 0.10-6.1.1 | < 0.10-6.1.1 | < 0.10-6.1.1 | < 0.10-6.1.1

  • debian•bacula

    < 1.36.3-2 | < 1.36.3-2 | < 1.36.3-2 | < 1.36.3-2

  • debian•dpkg

    < 1.13.11 | < 1.13.11 | < 1.13.11 | < 1.13.11

  • debian•dump

    < 0.4b40-1 | < 0.4b40-1 | < 0.4b40-1 | < 0.4b40-1

  • debian•libphysfs

    < 1.0.0-5 | < 1.0.0-5 | < 1.0.0-5 | < 1.0.0-5

  • debian•pvpgn

    < 1.7.8-2 | < 1.7.8-2 | < 1.7.8-2 | < 1.7.8-2

  • debian•rpm

    < 4.0.4-31.1 | < 4.0.4-31.1 | < 4.0.4-31.1 | < 4.0.4-31.1

  • debian•sash

    < 3.7-6 | < 3.7-6 | < 3.7-6 | < 3.7-6

  • debian•texmacs

    < 1:1.0.5-3 | < 1:1.0.5-3

  • debian•zlib

    < 1:1.2.2-7 | < 1:1.2.2-7 | < 1:1.2.2-7 | < 1:1.2.2-7

  • debian•zsync

    < 0.4.0-2 | < 0.4.0-2 | < 0.4.0-2 | < 0.4.0-2

  • zlib•zlib

    1.2.0 | 1.2.1 | 1.2.2

References (58)