# CVE-2022-37434: zlib: The zlib packages provide a general-purpose lossless data compression library that is used by many different programs...

CVE-2022-37434 is fixed in 19 products on 1 platform, first by klibc-utils 2.0.4-9ubuntu2.2+esm1, released August 5, 2022. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2022-37434
- Priority: High
- CVSS: 9.8 (Moderate)
- EPSS: 0.1924
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 5, 2022

## Description

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.  Security Fix(es):  * zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | klibc-utils Ubuntu 18.04.6 LTS (bionic) | 2.0.4-9ubuntu2.2+esm1 | [klibc-utils 2.0.4-9ubuntu2.2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-klibc-utils-2.0.4-9ubuntu2.2-esm1.md) | Aug 5, 2022 |
| Linux | klibc-utils Ubuntu 20.04 LTS (focal) | 2.0.7-1ubuntu5.2 | [klibc-utils 2.0.7-1ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-klibc-utils-2.0.7-1ubuntu5.2.md) | Aug 5, 2022 |
| Linux | klibc-utils Ubuntu 22.04.1 LTS (jammy) | 2.0.10-4ubuntu0.1 | [klibc-utils 2.0.10-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-klibc-utils-2.0.10-4ubuntu0.1.md) | Aug 5, 2022 |
| Linux | klibc-utils Ubuntu 24.04.5 LTS (noble) | 2.0.13-4ubuntu0.1 | [klibc-utils 2.0.13-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-klibc-utils-2.0.13-4ubuntu0.1.md) | Aug 5, 2022 |
| Linux | lib32z1 Ubuntu 18.04.6 LTS (bionic) | 1:1.2.11.dfsg-0ubuntu2.2 | [lib32z1 1:1.2.11.dfsg-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-lib32z1-1-1.2.11.dfsg-0ubuntu2.2.md) | Aug 5, 2022 |
| Linux | lib32z1 Ubuntu 20.04 LTS (focal) | 1:1.2.11.dfsg-2ubuntu1.5 | [lib32z1 1:1.2.11.dfsg-2ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-lib32z1-1-1.2.11.dfsg-2ubuntu1.5.md) | Aug 5, 2022 |
| Linux | lib32z1 Ubuntu 22.04.1 LTS (jammy) | 1:1.2.11.dfsg-2ubuntu9.2 | [lib32z1 1:1.2.11.dfsg-2ubuntu9.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-lib32z1-1-1.2.11.dfsg-2ubuntu9.2.md) | Aug 5, 2022 |
| Linux | lib64z1 Ubuntu 18.04.6 LTS (bionic) | 1:1.2.11.dfsg-0ubuntu2.2 | [lib64z1 1:1.2.11.dfsg-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-lib64z1-1-1.2.11.dfsg-0ubuntu2.2.md) | Aug 5, 2022 |
| Linux | lib64z1 Ubuntu 20.04 LTS (focal) | 1:1.2.11.dfsg-2ubuntu1.5 | [lib64z1 1:1.2.11.dfsg-2ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-lib64z1-1-1.2.11.dfsg-2ubuntu1.5.md) | Aug 5, 2022 |
| Linux | lib64z1 Ubuntu 22.04.1 LTS (jammy) | 1:1.2.11.dfsg-2ubuntu9.2 | [lib64z1 1:1.2.11.dfsg-2ubuntu9.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-lib64z1-1-1.2.11.dfsg-2ubuntu9.2.md) | Aug 5, 2022 |
| Linux | libklibc Ubuntu 18.04.6 LTS (bionic) | 2.0.4-9ubuntu2.2+esm1 | [libklibc 2.0.4-9ubuntu2.2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libklibc-2.0.4-9ubuntu2.2-esm1.md) | Aug 5, 2022 |
| Linux | libklibc Ubuntu 20.04 LTS (focal) | 2.0.7-1ubuntu5.2 | [libklibc 2.0.7-1ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libklibc-2.0.7-1ubuntu5.2.md) | Aug 5, 2022 |
| Linux | libklibc Ubuntu 22.04.1 LTS (jammy) | 2.0.10-4ubuntu0.1 | [libklibc 2.0.10-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libklibc-2.0.10-4ubuntu0.1.md) | Aug 5, 2022 |
| Linux | libklibc Ubuntu 24.04.5 LTS (noble) | 2.0.13-4ubuntu0.1 | [libklibc 2.0.13-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libklibc-2.0.13-4ubuntu0.1.md) | Aug 5, 2022 |
| Linux | libx32z1 Ubuntu 18.04.6 LTS (bionic) | 1:1.2.11.dfsg-0ubuntu2.2 | [libx32z1 1:1.2.11.dfsg-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libx32z1-1-1.2.11.dfsg-0ubuntu2.2.md) | Aug 5, 2022 |
| Linux | libx32z1 Ubuntu 20.04 LTS (focal) | 1:1.2.11.dfsg-2ubuntu1.5 | [libx32z1 1:1.2.11.dfsg-2ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libx32z1-1-1.2.11.dfsg-2ubuntu1.5.md) | Aug 5, 2022 |
| Linux | libx32z1 Ubuntu 22.04.1 LTS (jammy) | 1:1.2.11.dfsg-2ubuntu9.2 | [libx32z1 1:1.2.11.dfsg-2ubuntu9.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libx32z1-1-1.2.11.dfsg-2ubuntu9.2.md) | Aug 5, 2022 |
| Linux | libz-mingw-w64 Debian 12.15 (bookworm) | 1.2.12+dfsg-2 | [DEBIAN-CVE-2022-37434](https://patchblox.com/security/data/fix/linux/debian-cve-2022-37434.md) | Aug 5, 2022 |
| Linux | libz-mingw-w64 Debian 13.5 (trixie) | 1.2.12+dfsg-2 | [DEBIAN-CVE-2022-37434](https://patchblox.com/security/data/fix/linux/debian-cve-2022-37434.md) | Aug 5, 2022 |
| Linux | libz-mingw-w64 Debian 14 | 1.2.12+dfsg-2 | [DEBIAN-CVE-2022-37434](https://patchblox.com/security/data/fix/linux/debian-cve-2022-37434.md) | Aug 5, 2022 |
| Linux | minizip-compat amzn 2023 | 1.2.11-33.amzn2023.0.4 | [ALAS2023-2023-003](https://patchblox.com/security/data/fix/linux/alas2023-2023-003.md) | Feb 17, 2023 |
| Linux | minizip-compat-debuginfo amzn 2023 | 1.2.11-33.amzn2023.0.4 | [ALAS2023-2023-003](https://patchblox.com/security/data/fix/linux/alas2023-2023-003.md) | Feb 17, 2023 |
| Linux | minizip-compat-devel amzn 2023 | 1.2.11-33.amzn2023.0.4 | [ALAS2023-2023-003](https://patchblox.com/security/data/fix/linux/alas2023-2023-003.md) | Feb 17, 2023 |
| Linux | rsync RHEL 8 | 0:3.1.3-19.el8 | [RHSA-2022:7793](https://patchblox.com/security/data/fix/linux/rhsa-2022-7793.md) | Nov 8, 2022 |
| Linux | rsync RHEL 9 | 0:3.2.3-18.el9 | [RHSA-2022:8291](https://patchblox.com/security/data/fix/linux/rhsa-2022-8291.md) | Nov 15, 2022 |
| Linux | rsync Ubuntu 18.04.6 LTS (bionic) | 3.1.2-2.1ubuntu1.5 | [rsync 3.1.2-2.1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-rsync-3.1.2-2.1ubuntu1.5.md) | Aug 5, 2022 |
| Linux | rsync Ubuntu 20.04 LTS (focal) | 3.1.3-8ubuntu0.4 | [rsync 3.1.3-8ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-rsync-3.1.3-8ubuntu0.4.md) | Aug 5, 2022 |
| Linux | rsync almalinux 8 | 3.1.3-19.el8 | [ALSA-2022:7793](https://patchblox.com/security/data/fix/linux/alsa-2022-7793.md) | Nov 8, 2022 |
| Linux | rsync almalinux 9 | 3.2.3-18.el9 | [ALSA-2022:8291](https://patchblox.com/security/data/fix/linux/alsa-2022-8291.md) | Nov 15, 2022 |
| Linux | rsync amzn 2023 | 3.2.6-1.amzn2023.0.3 | [ALAS2023-2023-002](https://patchblox.com/security/data/fix/linux/alas2023-2023-002.md) | Feb 17, 2023 |
| Linux | rsync ol 8 | 0:3.1.3-19.el8 | [ELSA-2022-7793](https://patchblox.com/security/data/fix/linux/elsa-2022-7793.md) | Nov 15, 2022 |
| Linux | rsync ol 9 | 0:3.2.3-18.el9 | [ELSA-2022-8291](https://patchblox.com/security/data/fix/linux/elsa-2022-8291.md) | Nov 22, 2022 |
| Linux | rsync rocky 8 | 0:3.1.3-19.el8 | [RLSA-2022:7793](https://patchblox.com/security/data/fix/linux/rlsa-2022-7793.md) | Nov 8, 2022 |
| Linux | rsync rocky 9 | 0:3.2.3-18.el9 | [RLSA-2022:8291](https://patchblox.com/security/data/fix/linux/rlsa-2022-8291.md) | Nov 15, 2022 |
| Linux | rsync-daemon RHEL 8 | 0:3.1.3-19.el8 | [RHSA-2022:7793](https://patchblox.com/security/data/fix/linux/rhsa-2022-7793.md) | Nov 8, 2022 |
| Linux | rsync-daemon RHEL 9 | 0:3.2.3-18.el9 | [RHSA-2022:8291](https://patchblox.com/security/data/fix/linux/rhsa-2022-8291.md) | Nov 15, 2022 |
| Linux | rsync-daemon almalinux 8 | 3.1.3-19.el8 | [ALSA-2022:7793](https://patchblox.com/security/data/fix/linux/alsa-2022-7793.md) | Nov 8, 2022 |
| Linux | rsync-daemon almalinux 9 | 3.2.3-18.el9 | [ALSA-2022:8291](https://patchblox.com/security/data/fix/linux/alsa-2022-8291.md) | Nov 15, 2022 |
| Linux | rsync-daemon amzn 2023 | 3.2.6-1.amzn2023.0.3 | [ALAS2023-2023-002](https://patchblox.com/security/data/fix/linux/alas2023-2023-002.md) | Feb 17, 2023 |
| Linux | rsync-daemon ol 8 | 0:3.1.3-19.el8 | [ELSA-2022-7793](https://patchblox.com/security/data/fix/linux/elsa-2022-7793.md) | Nov 15, 2022 |
| Linux | rsync-daemon ol 9 | 0:3.2.3-18.el9 | [ELSA-2022-8291](https://patchblox.com/security/data/fix/linux/elsa-2022-8291.md) | Nov 22, 2022 |
| Linux | rsync-debuginfo amzn 2023 | 3.2.6-1.amzn2023.0.3 | [ALAS2023-2023-002](https://patchblox.com/security/data/fix/linux/alas2023-2023-002.md) | Feb 17, 2023 |
| Linux | rsync-debugsource amzn 2023 | 3.2.6-1.amzn2023.0.3 | [ALAS2023-2023-002](https://patchblox.com/security/data/fix/linux/alas2023-2023-002.md) | Feb 17, 2023 |
| Linux | zlib Debian 11.6 (bullseye) | 1:1.2.11.dfsg-2+deb11u2 | [DSA-5218-1](https://patchblox.com/security/data/fix/linux/dsa-5218-1.md) | Aug 25, 2022 |
| Linux | zlib Debian 12.15 (bookworm) | 1:1.2.11.dfsg-4.1 | [DEBIAN-CVE-2022-37434](https://patchblox.com/security/data/fix/linux/debian-cve-2022-37434.md) | Aug 5, 2022 |
| Linux | zlib Debian 13.5 (trixie) | 1:1.2.11.dfsg-4.1 | [DEBIAN-CVE-2022-37434](https://patchblox.com/security/data/fix/linux/debian-cve-2022-37434.md) | Aug 5, 2022 |
| Linux | zlib Debian 14 | 1:1.2.11.dfsg-4.1 | [DEBIAN-CVE-2022-37434](https://patchblox.com/security/data/fix/linux/debian-cve-2022-37434.md) | Aug 5, 2022 |
| Linux | zlib RHEL 8 | 0:1.2.11-19.el8_6 | [RHSA-2022:7106](https://patchblox.com/security/data/fix/linux/rhsa-2022-7106.md) | Oct 25, 2022 |
| Linux | zlib RHEL 9 | 0:1.2.11-32.el9_0 | [RHSA-2022:7314](https://patchblox.com/security/data/fix/linux/rhsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib almalinux 8 | 1.2.11-19.el8_6 | [ALSA-2022:7106](https://patchblox.com/security/data/fix/linux/alsa-2022-7106.md) | Oct 25, 2022 |
| Linux | zlib almalinux 9 | 1.2.11-32.el9_0 | [ALSA-2022:7314](https://patchblox.com/security/data/fix/linux/alsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib amzn 2023 | 1.2.11-33.amzn2023.0.4 | [ALAS2023-2023-003](https://patchblox.com/security/data/fix/linux/alas2023-2023-003.md) | Feb 17, 2023 |
| Linux | zlib ol 8 | 0:1.2.11-19.el8_6 | [ELSA-2022-7106](https://patchblox.com/security/data/fix/linux/elsa-2022-7106.md) | Oct 26, 2022 |
| Linux | zlib ol 9 | 0:1.2.11-32.el9_0 | [ELSA-2022-7314](https://patchblox.com/security/data/fix/linux/elsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib rocky 8 | 0:1.2.11-19.el8_6 | [RLSA-2022:7106](https://patchblox.com/security/data/fix/linux/rlsa-2022-7106.md) | Oct 25, 2022 |
| Linux | zlib rocky 9 | 0:1.2.11-32.el9_0 | [RLSA-2022:7314](https://patchblox.com/security/data/fix/linux/rlsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib-debuginfo amzn 2023 | 1.2.11-33.amzn2023.0.4 | [ALAS2023-2023-003](https://patchblox.com/security/data/fix/linux/alas2023-2023-003.md) | Feb 17, 2023 |
| Linux | zlib-debugsource amzn 2023 | 1.2.11-33.amzn2023.0.4 | [ALAS2023-2023-003](https://patchblox.com/security/data/fix/linux/alas2023-2023-003.md) | Feb 17, 2023 |
| Linux | zlib-devel RHEL 8 | 0:1.2.11-19.el8_6 | [RHSA-2022:7106](https://patchblox.com/security/data/fix/linux/rhsa-2022-7106.md) | Oct 25, 2022 |
| Linux | zlib-devel RHEL 9 | 0:1.2.11-32.el9_0 | [RHSA-2022:7314](https://patchblox.com/security/data/fix/linux/rhsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib-devel almalinux 8 | 1.2.11-19.el8_6 | [ALSA-2022:7106](https://patchblox.com/security/data/fix/linux/alsa-2022-7106.md) | Oct 25, 2022 |
| Linux | zlib-devel almalinux 9 | 1.2.11-32.el9_0 | [ALSA-2022:7314](https://patchblox.com/security/data/fix/linux/alsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib-devel amzn 2023 | 1.2.11-33.amzn2023.0.4 | [ALAS2023-2023-003](https://patchblox.com/security/data/fix/linux/alas2023-2023-003.md) | Feb 17, 2023 |
| Linux | zlib-devel ol 8 | 0:1.2.11-19.el8_6 | [ELSA-2022-7106](https://patchblox.com/security/data/fix/linux/elsa-2022-7106.md) | Oct 26, 2022 |
| Linux | zlib-devel ol 9 | 0:1.2.11-32.el9_0 | [ELSA-2022-7314](https://patchblox.com/security/data/fix/linux/elsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib-static RHEL 8 | 0:1.2.11-19.el8_6 | [RHSA-2022:7106](https://patchblox.com/security/data/fix/linux/rhsa-2022-7106.md) | Oct 25, 2022 |
| Linux | zlib-static RHEL 9 | 0:1.2.11-32.el9_0 | [RHSA-2022:7314](https://patchblox.com/security/data/fix/linux/rhsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib-static almalinux 8 | 1.2.11-19.el8_6 | [ALSA-2022:7106](https://patchblox.com/security/data/fix/linux/alsa-2022-7106.md) | Oct 25, 2022 |
| Linux | zlib-static almalinux 9 | 1.2.11-32.el9_0 | [ALSA-2022:7314](https://patchblox.com/security/data/fix/linux/alsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib-static amzn 2023 | 1.2.11-33.amzn2023.0.4 | [ALAS2023-2023-003](https://patchblox.com/security/data/fix/linux/alas2023-2023-003.md) | Feb 17, 2023 |
| Linux | zlib-static ol 8 | 0:1.2.11-19.el8_6 | [ELSA-2022-7106](https://patchblox.com/security/data/fix/linux/elsa-2022-7106.md) | Oct 26, 2022 |
| Linux | zlib-static ol 9 | 0:1.2.11-32.el9_0 | [ELSA-2022-7314](https://patchblox.com/security/data/fix/linux/elsa-2022-7314.md) | Nov 2, 2022 |
| Linux | zlib1g Ubuntu 18.04.6 LTS (bionic) | 1:1.2.11.dfsg-0ubuntu2.2 | [zlib1g 1:1.2.11.dfsg-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-zlib1g-1-1.2.11.dfsg-0ubuntu2.2.md) | Aug 5, 2022 |
| Linux | zlib1g Ubuntu 20.04 LTS (focal) | 1:1.2.11.dfsg-2ubuntu1.5 | [zlib1g 1:1.2.11.dfsg-2ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-zlib1g-1-1.2.11.dfsg-2ubuntu1.5.md) | Aug 5, 2022 |
| Linux | zlib1g Ubuntu 22.04.1 LTS (jammy) | 1:1.2.11.dfsg-2ubuntu9.2 | [zlib1g 1:1.2.11.dfsg-2ubuntu9.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-zlib1g-1-1.2.11.dfsg-2ubuntu9.2.md) | Aug 5, 2022 |

---

Data as of 2026-11-10T07:50:38Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.