CVE-2023-6992

Name of the Vulnerable Software and Affected Versions Cloudflare version of zlib library (affected versions not specified)

Description The Cloudflare version of the zlib library was found to have memory corruption issues due to improper input validation and heap-based buffer overflow in the deflation algorithm implementation. A local attacker could exploit this issue during compression using a crafted malicious file, potentially leading to denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.