CVE detail
CVE-2005-2096
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 1
- within the 30d window
- Peak daily
- 1
- highest bucket
Evidence
Source links by recency
58 source links · newest first
- Siemens CADRACISA Alerts
cations, Energy Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities Expand All + CVE-2005-2096 zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow,
governmentwww.cisa.govJul 21, 2026, 12:00 PM - https://cert-portal.siemens.com/productcert/html/ssa-470355.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comJul 6, 2005, 4:00 AM - https://usn.ubuntu.com/148-1/usn.ubuntu.com
No excerpt available.
Third Party Advisoryusn.ubuntu.comJul 6, 2005, 4:00 AM - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542oval.cisecurity.org
No excerpt available.
Third Party Advisoryoval.cisecurity.orgJul 6, 2005, 4:00 AM - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262oval.cisecurity.org
No excerpt available.
Third Party Advisoryoval.cisecurity.orgJul 6, 2005, 4:00 AM - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500oval.cisecurity.org
No excerpt available.
Third Party Advisoryoval.cisecurity.orgJul 6, 2005, 4:00 AM - https://exchange.xforce.ibmcloud.com/vulnerabilities/24064exchange.xforce.ibmcloud.com
No excerpt available.
Vendor Advisoryexchange.xforce.ibmcloud.comJul 6, 2005, 4:00 AM - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJul 6, 2005, 4:00 AM - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJul 6, 2005, 4:00 AM - http://www.vupen.com/english/advisories/2007/1267www.vupen.com
No excerpt available.
Vendor Advisorywww.vupen.comJul 6, 2005, 4:00 AM - http://www.vupen.com/english/advisories/2006/0144www.vupen.com
No excerpt available.
Vendor Advisorywww.vupen.comJul 6, 2005, 4:00 AM - http://www.vupen.com/english/advisories/2005/0978www.vupen.com
No excerpt available.
Vendor Advisorywww.vupen.comJul 6, 2005, 4:00 AM No excerpt available.
Vendor Advisorywww.vmware.comJul 6, 2005, 4:00 AMNo excerpt available.
Vendor Advisorywww.vmware.comJul 6, 2005, 4:00 AM- http://www.ubuntulinux.org/usn/usn-151-3www.ubuntulinux.org
No excerpt available.
referencewww.ubuntulinux.orgJul 6, 2005, 4:00 AM - http://www.securityfocus.com/bid/14162www.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comJul 6, 2005, 4:00 AM - http://www.securityfocus.com/archive/1/482950/100/0/threadedwww.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comJul 6, 2005, 4:00 AM - http://www.securityfocus.com/archive/1/482949/100/0/threadedwww.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comJul 6, 2005, 4:00 AM - http://www.securityfocus.com/archive/1/482601/100/0/threadedwww.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comJul 6, 2005, 4:00 AM - http://www.securityfocus.com/archive/1/482571/100/0/threadedwww.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comJul 6, 2005, 4:00 AM - http://www.securityfocus.com/archive/1/482505/100/0/threadedwww.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comJul 6, 2005, 4:00 AM - http://www.securityfocus.com/archive/1/482503/100/0/threadedwww.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comJul 6, 2005, 4:00 AM - http://www.securityfocus.com/archive/1/464745/100/0/threadedwww.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comJul 6, 2005, 4:00 AM - http://www.securityfocus.com/archive/1/421411/100/0/threadedwww.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comJul 6, 2005, 4:00 AM - http://www.redhat.com/support/errata/RHSA-2008-0629.htmlwww.redhat.com
No excerpt available.
Vendor Advisorywww.redhat.comJul 6, 2005, 4:00 AM - http://www.redhat.com/support/errata/RHSA-2005-569.htmlwww.redhat.com
No excerpt available.
Vendor Advisorywww.redhat.comJul 6, 2005, 4:00 AM - http://www.mandriva.com/security/advisories?name=MDKSA-2006:070www.mandriva.com
No excerpt available.
Third Party Advisorywww.mandriva.comJul 6, 2005, 4:00 AM - http://www.mandriva.com/security/advisories?name=MDKSA-2005:196www.mandriva.com
No excerpt available.
Third Party Advisorywww.mandriva.comJul 6, 2005, 4:00 AM - http://www.mandriva.com/security/advisories?name=MDKSA-2005:112www.mandriva.com
No excerpt available.
Third Party Advisorywww.mandriva.comJul 6, 2005, 4:00 AM - http://www.kb.cert.org/vuls/id/680620www.kb.cert.org
No excerpt available.
Patchwww.kb.cert.orgJul 6, 2005, 4:00 AM No excerpt available.
Vendor Advisorywww.gentoo.orgJul 6, 2005, 4:00 AM- http://www.debian.org/security/2006/dsa-1026www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgJul 6, 2005, 4:00 AM - http://www.debian.org/security/2005/dsa-797www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgJul 6, 2005, 4:00 AM - http://www.debian.org/security/2005/dsa-740www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgJul 6, 2005, 4:00 AM - http://support.avaya.com/elmodocs2/security/ASA-2006-016.htmsupport.avaya.com
No excerpt available.
Vendor Advisorysupport.avaya.comJul 6, 2005, 4:00 AM - http://support.apple.com/kb/HT3298support.apple.com
No excerpt available.
Vendor Advisorysupport.apple.comJul 6, 2005, 4:00 AM No excerpt available.
Vendor Advisorysunsolve.sun.comJul 6, 2005, 4:00 AM- http://securitytracker.com/id?1014398securitytracker.com
No excerpt available.
Vendor Advisorysecuritytracker.comJul 6, 2005, 4:00 AM - http://security.gentoo.org/glsa/glsa-200507-05.xmlsecurity.gentoo.org
No excerpt available.
Vendor Advisorysecurity.gentoo.orgJul 6, 2005, 4:00 AM - http://secunia.com/advisories/32706secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/31492secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/24788secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/19597secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/19550secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/18507secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/18406secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/18377secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/17516secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/17326secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/17236secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/17225secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/17054secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM - http://secunia.com/advisories/15949secunia.com
No excerpt available.
Exploitsecunia.comJul 6, 2005, 4:00 AM No excerpt available.
Vendor Advisorylists.apple.comJul 6, 2005, 4:00 AMNo excerpt available.
Vendor Advisorylists.apple.comJul 6, 2005, 4:00 AMNo excerpt available.
Vendor Advisorylists.apple.comJul 6, 2005, 4:00 AMNo excerpt available.
referenceHostname unavailableJul 6, 2005, 4:00 AMNo excerpt available.
referenceHostname unavailableJul 6, 2005, 4:00 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-27171CVSS 2.9 · Low
zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.
- CVE-2026-22184CVSS 4.6 · Medium
zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonst…
- CVE-2025-0725CVSS 7.3 · High
When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an atta…
- CVE-2023-45853CVSS 9.8 · Critical
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip…
- CVE-2022-37434CVSS 9.8 · Critical
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetH…
- CVE-2018-25032CVSS 7.5 · High
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.