Paul Marquess Compress-Raw-Zlib Perl Module vulnerabilities

1 known vulnerability affecting paul_marquess/compress-raw-zlib_perl_module.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2009-1391MEDIUMCVSS 6.8ExploitedPoC≤ 2.015v2.001+11 more2009-06-16

CVE-2009-1391 [MEDIUM] CWE-189 CVE-2009-1391: Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by T