CVE-2022-37434 - log back

CVE-2022-37434 edited at 02 Mar 2023 14:01:48
Severity
- Unknown
+ High
Remote
- Unknown
+ Local
Type
- Unknown
+ Arbitrary code execution
Description
+ A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call inflateGetHeader.
References
+ https://github.com/archlinux/svntogit-packages/commit/842507fff025b6e7f447082988051155d932cd49
Notes
CVE-2022-37434 created at 26 Jan 2023 19:41:28