Critical severity9.8NVD Advisory· Published Aug 5, 2022· Updated Jul 14, 2026

CVE-2022-37434

Description

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NetApp/Active Iq Unified Manager2 versions
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*+ 1 more
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
NetApp/HCI
cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:*
NetApp/Management Services For Element Software
cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:*
NetApp/Oncommand Workflow Automation
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
NetApp/Ontap Select Deploy Administration Utility
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
NetApp/Storagegrid
cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*
Stormshield/Network Security
cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*
Range: >=3.7.31,<3.7.34
Zlib/Zlib2 versions
cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*range: <=1.2.12
- (no CPE)range: <=1.2.12
NetApp/Hci Compute Node
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
Apple Inc./Ipados
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Range: <15.7.1
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <15.7.1
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: >=11.0,<11.7.1
Apple Inc./watchOS
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Range: <9.1
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
NetApp/H300s Firmware
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
NetApp/H500s Firmware
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
NetApp/H700s Firmware
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
osv-coords60 versions
pkg:apk/chainguard/minizip pkg:apk/chainguard/zlib pkg:apk/chainguard/zlib-dev pkg:apk/chainguard/zlib-doc pkg:apk/chainguard/zlib-static pkg:apk/wolfi/minizip pkg:apk/wolfi/zlib pkg:apk/wolfi/zlib-dev pkg:apk/wolfi/zlib-doc pkg:apk/wolfi/zlib-static pkg:rpm/almalinux/rsync pkg:rpm/almalinux/rsync-daemon pkg:rpm/almalinux/zlib pkg:rpm/almalinux/zlib-devel pkg:rpm/almalinux/zlib-static pkg:rpm/opensuse/libqt5-qtbase&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/rsync&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/rusty_v8&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/vlc&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/vlc&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/vlc&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/zlib&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/zlib&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/zlib&distro=openSUSE%20Leap%20Micro%205.2 pkg:rpm/suse/vlc&distro=SUSE%20Package%20Hub%2015%20SP4 pkg:rpm/suse/vlc&distro=SUSE%20Package%20Hub%2015%20SP5 pkg:rpm/suse/zlib&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/zlib&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/zlib&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/zlib&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/zlib&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/zlib&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/zlib&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 1.2.13-r1+ 59 more
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 1.2.13-r1
- (no CPE)range: < 3.1.3-19.el8
- (no CPE)range: < 3.1.3-19.el8
- (no CPE)range: < 1.2.11-19.el8_6
- (no CPE)range: < 1.2.11-19.el8_6
- (no CPE)range: < 1.2.11-19.el8_6
- (no CPE)range: < 5.15.6+kde177-1.1
- (no CPE)range: < 3.2.5-1.1
- (no CPE)range: < 0.106.0-1.1
- (no CPE)range: < 3.0.20-bp154.2.6.1
- (no CPE)range: < 3.0.20-bp155.2.3.1
- (no CPE)range: < 3.0.19-1.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 3.0.20-bp154.2.6.1
- (no CPE)range: < 3.0.20-bp155.2.3.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.8-12.9.1
- (no CPE)range: < 1.2.8-12.9.1
- (no CPE)range: < 1.2.11-3.9.1
- (no CPE)range: < 1.2.11-11.22.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-3.9.1
- (no CPE)range: < 1.2.11-11.22.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-11.22.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-150000.3.33.1
- (no CPE)range: < 1.2.11-3.9.1
- (no CPE)range: < 1.2.11-3.9.1

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2022/08/09/1nvdMailing ListPatchThird Party Advisory
github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1nvdPatchThird Party Advisory
github.com/curl/curl/issues/9271nvdExploitIssue TrackingThird Party Advisory
github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.hnvdExploitThird Party Advisory
github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.cnvdExploitThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/37nvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/38nvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/41nvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/42nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2022/08/05/2nvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2022/09/msg00012.htmlnvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/nvdMailing ListThird Party Advisory
security.netapp.com/advisory/ntap-20220901-0005/nvdThird Party Advisory
security.netapp.com/advisory/ntap-20230427-0007/nvdThird Party Advisory
support.apple.com/kb/HT213488nvdThird Party Advisory
support.apple.com/kb/HT213489nvdThird Party Advisory
support.apple.com/kb/HT213490nvdThird Party Advisory
support.apple.com/kb/HT213491nvdThird Party Advisory
support.apple.com/kb/HT213493nvdThird Party Advisory
support.apple.com/kb/HT213494nvdThird Party Advisory
www.debian.org/security/2022/dsa-5218nvdThird Party Advisory
cert-portal.siemens.com/productcert/html/ssa-150063.htmlnvd
cert-portal.siemens.com/productcert/html/ssa-202008.htmlnvd
cert-portal.siemens.com/productcert/html/ssa-398330.htmlnvd
cert-portal.siemens.com/productcert/html/ssa-470355.htmlnvd
cert-portal.siemens.com/productcert/html/ssa-561322.htmlnvd
github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91dnvd

News mentions

Siemens CADRA
CISA ICS Advisories

cvss	0.637
epss	0.014
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000