Ubuntu warns of zlib heap overflow in non-blocking writes
Original title: USN-8954-1: zlib vulnerability
Ali Firas found mishandled writes that can crash zlib or allow arbitrary code execution.
Ubuntu security notice USN-8954-1 describes a zlib flaw found by Ali Firas. Certain non-blocking write operations are handled incorrectly and can cause a heap buffer overflow. Ubuntu says an attacker could possibly trigger a denial of service or arbitrary code execution. The provided notice text names no CVE, affected versions, or fixed package version.
Unconfirmed: Affected versions, a CVE id, and exploitation status are not in the snippet.
- The flaw is incorrect handling of certain non-blocking write operations.
- Stated impact is denial of service or arbitrary code execution.
- No CVE identifier appears in the notice text provided.
Impact: Heap buffer overflow causing denial of service or code execution
| Product | Affected |
|---|---|
| zlib | — |
- 1.Install the Ubuntu security update covered by USN-8954-1.
From the original article
Ali Firas discovered that zlib incorrectly handled certain non-blocking write operations. An attacker could possibly use this issue to trigger a heap buffer overflow, resulting in a denial of service or arbitrary code execution.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.