CVE-2022-1271

< 1.12

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file n

8.8HIGH

CVE-2010-0001

<= 1.3.13

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably other

CVE-2009-2624

<= 1.3.12

The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows rem

CVE-2006-4338

all versions

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a c

CVE-2006-4337

all versions

Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitr

CVE-2006-4336

all versions

Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code

CVE-2006-4335

all versions

Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain

CVE-2006-4334

all versions

Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP

CVE-2005-0758

< 1.3.5

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filena

CVE-2005-1228

all versions

Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directori

CVE-2005-0988

all versions

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of a

CVE-2004-0970

all versions

The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local user

CVE-2004-0603

<= 1.3.3

gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, wh

CVE-2004-1349

< 1.3

gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked t

CVE-2003-0367

<= 1.3.5

znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.

CVE-2001-1228

all versions

Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remo