MSRC_CVE-2026-22184

Vulnerability from csaf_microsoft - Published: 2026-01-02 00:00 - Updated: 2026-01-12 14:37
Summary
zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()

Notes

Additional Resources
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer
The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
To clipboard 

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-22184 zlib \u003c= 1.3.1.2 untgz Global Buffer Overflow in TGZfname() - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-22184.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "zlib \u003c= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()",
    "tracking": {
      "current_release_date": "2026-01-12T14:37:58.000Z",
      "generator": {
        "date": "2026-02-18T14:43:41.751Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-22184",
      "initial_release_date": "2026-01-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-01-09T01:08:25.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2026-01-11T01:04:12.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Information published."
        },
        {
          "date": "2026-01-12T14:37:58.000Z",
          "legacy_version": "3",
          "number": "3",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 ceph 18.2.2-12",
                "product": {
                  "name": "azl3 ceph 18.2.2-12",
                  "product_id": "4"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 ceph 16.2.10-11",
                "product": {
                  "name": "cbl2 ceph 16.2.10-11",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "ceph"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 crash 9.0.0-1",
                "product": {
                  "name": "azl3 crash 9.0.0-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 crash 8.0.1-5",
                "product": {
                  "name": "cbl2 crash 8.0.1-5",
                  "product_id": "9"
                }
              }
            ],
            "category": "product_name",
            "name": "crash"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 gcc 13.2.0-7",
                "product": {
                  "name": "azl3 gcc 13.2.0-7",
                  "product_id": "23"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 gcc 11.2.0-9",
                "product": {
                  "name": "cbl2 gcc 11.2.0-9",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "gcc"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "cbl2 binutils 2.37-19",
                "product": {
                  "name": "cbl2 binutils 2.37-19",
                  "product_id": "10"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 binutils 2.41-10",
                "product": {
                  "name": "azl3 binutils 2.41-10",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "binutils"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "cbl2 grpc 1.42.0-11",
                "product": {
                  "name": "cbl2 grpc 1.42.0-11",
                  "product_id": "28"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 grpc 1.62.3-1",
                "product": {
                  "name": "azl3 grpc 1.62.3-1",
                  "product_id": "30"
                }
              }
            ],
            "category": "product_name",
            "name": "grpc"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 nmap 7.95-2",
                "product": {
                  "name": "azl3 nmap 7.95-2",
                  "product_id": "31"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 nmap 7.93-3",
                "product": {
                  "name": "cbl2 nmap 7.93-3",
                  "product_id": "13"
                }
              }
            ],
            "category": "product_name",
            "name": "nmap"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 python-tensorboard 2.16.2-6",
                "product": {
                  "name": "azl3 python-tensorboard 2.16.2-6",
                  "product_id": "21"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 python-tensorboard 2.11.0-3",
                "product": {
                  "name": "cbl2 python-tensorboard 2.11.0-3",
                  "product_id": "20"
                }
              }
            ],
            "category": "product_name",
            "name": "python-tensorboard"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 rubygem-mini_portile2 2.8.4-1",
                "product": {
                  "name": "azl3 rubygem-mini_portile2 2.8.4-1",
                  "product_id": "19"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 rubygem-mini_portile2 2.8.0-1",
                "product": {
                  "name": "cbl2 rubygem-mini_portile2 2.8.0-1",
                  "product_id": "18"
                }
              }
            ],
            "category": "product_name",
            "name": "rubygem-mini_portile2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 tcl 8.6.13-3",
                "product": {
                  "name": "azl3 tcl 8.6.13-3",
                  "product_id": "24"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 tcl 8.6.13-3",
                "product": {
                  "name": "cbl2 tcl 8.6.13-3",
                  "product_id": "26"
                }
              }
            ],
            "category": "product_name",
            "name": "tcl"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "cbl2 rust 1.72.0-11",
                "product": {
                  "name": "cbl2 rust 1.72.0-11",
                  "product_id": "8"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 rust 1.75.0-22",
                "product": {
                  "name": "azl3 rust 1.75.0-22",
                  "product_id": "3"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 rust 1.86.0-10",
                "product": {
                  "name": "azl3 rust 1.86.0-10",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "rust"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "cbl2 tensorflow 2.11.1-2",
                "product": {
                  "name": "cbl2 tensorflow 2.11.1-2",
                  "product_id": "22"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 tensorflow 2.16.1-9",
                "product": {
                  "name": "azl3 tensorflow 2.16.1-9",
                  "product_id": "29"
                }
              }
            ],
            "category": "product_name",
            "name": "tensorflow"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 zlib 1.3.1-1",
                "product": {
                  "name": "azl3 zlib 1.3.1-1",
                  "product_id": "25"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 zlib 1.2.13-2",
                "product": {
                  "name": "cbl2 zlib 1.2.13-2",
                  "product_id": "27"
                }
              }
            ],
            "category": "product_name",
            "name": "zlib"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 boost 1.83.0-2",
                "product": {
                  "name": "azl3 boost 1.83.0-2",
                  "product_id": "16"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 boost 1.76.0-4",
                "product": {
                  "name": "cbl2 boost 1.76.0-4",
                  "product_id": "17"
                }
              }
            ],
            "category": "product_name",
            "name": "boost"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 gdb 13.2-6",
                "product": {
                  "name": "azl3 gdb 13.2-6",
                  "product_id": "12"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 gdb 11.2-10",
                "product": {
                  "name": "cbl2 gdb 11.2-10",
                  "product_id": "11"
                }
              }
            ],
            "category": "product_name",
            "name": "gdb"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "cbl2 cloud-hypervisor 32.0-7",
                "product": {
                  "name": "cbl2 cloud-hypervisor 32.0-7",
                  "product_id": "14"
                }
              }
            ],
            "category": "product_name",
            "name": "cloud-hypervisor"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "cbl2 keras 2.11.0-3",
                "product": {
                  "name": "cbl2 keras 2.11.0-3",
                  "product_id": "15"
                }
              }
            ],
            "category": "product_name",
            "name": "keras"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 ceph 18.2.2-12 as a component of Azure Linux 3.0",
          "product_id": "17084-4"
        },
        "product_reference": "4",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 crash 9.0.0-1 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 gcc 13.2.0-7 as a component of Azure Linux 3.0",
          "product_id": "17084-23"
        },
        "product_reference": "23",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 binutils 2.37-19 as a component of CBL Mariner 2.0",
          "product_id": "17086-10"
        },
        "product_reference": "10",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 grpc 1.42.0-11 as a component of CBL Mariner 2.0",
          "product_id": "17086-28"
        },
        "product_reference": "28",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 nmap 7.95-2 as a component of Azure Linux 3.0",
          "product_id": "17084-31"
        },
        "product_reference": "31",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 python-tensorboard 2.16.2-6 as a component of Azure Linux 3.0",
          "product_id": "17084-21"
        },
        "product_reference": "21",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 nmap 7.93-3 as a component of CBL Mariner 2.0",
          "product_id": "17086-13"
        },
        "product_reference": "13",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 rubygem-mini_portile2 2.8.4-1 as a component of Azure Linux 3.0",
          "product_id": "17084-19"
        },
        "product_reference": "19",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 tcl 8.6.13-3 as a component of Azure Linux 3.0",
          "product_id": "17084-24"
        },
        "product_reference": "24",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 rubygem-mini_portile2 2.8.0-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-18"
        },
        "product_reference": "18",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 rust 1.72.0-11 as a component of CBL Mariner 2.0",
          "product_id": "17086-8"
        },
        "product_reference": "8",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 tensorflow 2.11.1-2 as a component of CBL Mariner 2.0",
          "product_id": "17086-22"
        },
        "product_reference": "22",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 zlib 1.3.1-1 as a component of Azure Linux 3.0",
          "product_id": "17084-25"
        },
        "product_reference": "25",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 binutils 2.41-10 as a component of Azure Linux 3.0",
          "product_id": "17084-7"
        },
        "product_reference": "7",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 boost 1.83.0-2 as a component of Azure Linux 3.0",
          "product_id": "17084-16"
        },
        "product_reference": "16",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 gdb 13.2-6 as a component of Azure Linux 3.0",
          "product_id": "17084-12"
        },
        "product_reference": "12",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 boost 1.76.0-4 as a component of CBL Mariner 2.0",
          "product_id": "17086-17"
        },
        "product_reference": "17",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 ceph 16.2.10-11 as a component of CBL Mariner 2.0",
          "product_id": "17086-5"
        },
        "product_reference": "5",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 cloud-hypervisor 32.0-7 as a component of CBL Mariner 2.0",
          "product_id": "17086-14"
        },
        "product_reference": "14",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 grpc 1.62.3-1 as a component of Azure Linux 3.0",
          "product_id": "17084-30"
        },
        "product_reference": "30",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 crash 8.0.1-5 as a component of CBL Mariner 2.0",
          "product_id": "17086-9"
        },
        "product_reference": "9",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 gcc 11.2.0-9 as a component of CBL Mariner 2.0",
          "product_id": "17086-6"
        },
        "product_reference": "6",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 gdb 11.2-10 as a component of CBL Mariner 2.0",
          "product_id": "17086-11"
        },
        "product_reference": "11",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 keras 2.11.0-3 as a component of CBL Mariner 2.0",
          "product_id": "17086-15"
        },
        "product_reference": "15",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 python-tensorboard 2.11.0-3 as a component of CBL Mariner 2.0",
          "product_id": "17086-20"
        },
        "product_reference": "20",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 rust 1.75.0-22 as a component of Azure Linux 3.0",
          "product_id": "17084-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 rust 1.86.0-10 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 tensorflow 2.16.1-9 as a component of Azure Linux 3.0",
          "product_id": "17084-29"
        },
        "product_reference": "29",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 tcl 8.6.13-3 as a component of CBL Mariner 2.0",
          "product_id": "17086-26"
        },
        "product_reference": "26",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 zlib 1.2.13-2 as a component of CBL Mariner 2.0",
          "product_id": "17086-27"
        },
        "product_reference": "27",
        "relates_to_product_reference": "17086"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-22184",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0026#39;Classic Buffer Overflow\u0026#39;)"
      },
      "notes": [
        {
          "category": "general",
          "text": "VulnCheck",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "known_affected": [
          "17084-4",
          "17084-1",
          "17084-23",
          "17086-10",
          "17086-28",
          "17084-31",
          "17084-21",
          "17086-13",
          "17084-19",
          "17084-24",
          "17086-18",
          "17086-8",
          "17086-22",
          "17084-25",
          "17084-7",
          "17084-16",
          "17084-12",
          "17086-17",
          "17086-5",
          "17086-14",
          "17084-30",
          "17086-9",
          "17086-6",
          "17086-11",
          "17086-15",
          "17086-20",
          "17084-3",
          "17084-2",
          "17084-29",
          "17086-26",
          "17086-27"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-22184 zlib \u003c= 1.3.1.2 untgz Global Buffer Overflow in TGZfname() - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-22184.json"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-4"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-1"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-23"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-10"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-28"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-31"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-21"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-13"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-19"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-24"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-18"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-8"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-22"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-25"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-7"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-16"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-12"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-17"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-5"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-14"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-30"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-9"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-6"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-11"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-15"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-20"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-3"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-2"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-29"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-26"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-01-09T01:08:25.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-27"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "17084-4",
            "17084-1",
            "17084-23",
            "17086-10",
            "17086-28",
            "17084-31",
            "17084-21",
            "17086-13",
            "17084-19",
            "17084-24",
            "17086-18",
            "17086-8",
            "17086-22",
            "17084-25",
            "17084-7",
            "17084-16",
            "17084-12",
            "17086-17",
            "17086-5",
            "17086-14",
            "17084-30",
            "17086-9",
            "17086-6",
            "17086-11",
            "17086-15",
            "17086-20",
            "17084-3",
            "17084-2",
            "17084-29",
            "17086-26",
            "17086-27"
          ]
        }
      ],
      "title": "zlib \u003c= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.