CVE-2026-27171 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	2.9 LOW	LOCAL	HIGH	NONE	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 10%

Affected Products (NVD)

Vendor	Product	Version
zlib	zlib	1.2.12 ≤ 𝑥 < 1.3.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

zlib

bookworm	no-dsa
bullseye	postponed
bullseye (security)	vulnerable
forky	1:1.3.dfsg+really1.3.2-3 fixed
sid	1:1.3.dfsg+really1.3.2-3 fixed
trixie	no-dsa

openSUSE / SLES Releases

openSUSE Product

Release

libminizip1

suse enterprise desktop 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise sap 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise server 15 SP7	1.2.13-150500.4.6.1 fixed

libz1

suse enterprise desktop 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise sap 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise server 15 SP7	1.2.13-150500.4.6.1 fixed

libz1-32bit

suse enterprise desktop 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise sap 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise server 15 SP7	1.2.13-150500.4.6.1 fixed

minizip-devel

suse enterprise desktop 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise sap 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise server 15 SP7	1.2.13-150500.4.6.1 fixed

zlib-devel

suse enterprise desktop 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise sap 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise server 15 SP7	1.2.13-150500.4.6.1 fixed

zlib-devel-static

suse enterprise desktop 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise sap 15 SP7	1.2.13-150500.4.6.1 fixed
suse enterprise server 15 SP7	1.2.13-150500.4.6.1 fixed

Amazon Linux Releases

Amazon Package

Release

nodejs20

Amazon Linux 2023

1:20.20.2-1.amzn2023.0.2

fixed

nodejs20-debuginfo

Amazon Linux 2023

1:20.20.2-1.amzn2023.0.2

fixed

nodejs20-debugsource

Amazon Linux 2023

1:20.20.2-1.amzn2023.0.2

fixed

nodejs20-devel

Amazon Linux 2023

1:20.20.2-1.amzn2023.0.2

fixed

nodejs20-docs

Amazon Linux 2023

1:20.20.2-1.amzn2023.0.2

fixed

nodejs20-full-i18n

Amazon Linux 2023

1:20.20.2-1.amzn2023.0.2

fixed

nodejs20-libs

Amazon Linux 2023

1:20.20.2-1.amzn2023.0.2

fixed

nodejs20-libs-debuginfo

Amazon Linux 2023

1:20.20.2-1.amzn2023.0.2

fixed

nodejs20-npm

Amazon Linux 2023

1:10.8.2-1.20.20.2.1.amzn2023.0.2

fixed

nodejs22

Amazon Linux 2023

1:22.22.2-1.amzn2023.0.2

fixed

nodejs22-debuginfo

Amazon Linux 2023

1:22.22.2-1.amzn2023.0.2

fixed

nodejs22-debugsource

Amazon Linux 2023

1:22.22.2-1.amzn2023.0.2

fixed

nodejs22-devel

Amazon Linux 2023

1:22.22.2-1.amzn2023.0.2

fixed

nodejs22-docs

Amazon Linux 2023

1:22.22.2-1.amzn2023.0.2

fixed

nodejs22-full-i18n

Amazon Linux 2023

1:22.22.2-1.amzn2023.0.2

fixed

nodejs22-libs

Amazon Linux 2023

1:22.22.2-1.amzn2023.0.2

fixed

nodejs22-libs-debuginfo

Amazon Linux 2023

1:22.22.2-1.amzn2023.0.2

fixed

nodejs22-npm

Amazon Linux 2023

1:10.9.7-1.22.22.2.1.amzn2023.0.2

fixed

nodejs24

Amazon Linux 2023

1:24.15.0-1.amzn2023.0.1

fixed

nodejs24-debuginfo

Amazon Linux 2023

1:24.15.0-1.amzn2023.0.1

fixed

nodejs24-debugsource

Amazon Linux 2023

1:24.15.0-1.amzn2023.0.1

fixed

nodejs24-devel

Amazon Linux 2023

1:24.15.0-1.amzn2023.0.1

fixed

nodejs24-docs

Amazon Linux 2023

1:24.15.0-1.amzn2023.0.1

fixed

nodejs24-full-i18n

Amazon Linux 2023

1:24.15.0-1.amzn2023.0.1

fixed

nodejs24-libs

Amazon Linux 2023

1:24.15.0-1.amzn2023.0.1

fixed

nodejs24-libs-debuginfo

Amazon Linux 2023

1:24.15.0-1.amzn2023.0.1

fixed

nodejs24-npm

Amazon Linux 2023

1:11.12.1-1.24.15.0.1.amzn2023.0.1

fixed

v8-11.3-devel

Amazon Linux 2023

3:11.3.244.8-1.20.20.2.1.amzn2023.0.2

fixed

v8-12.4-devel

Amazon Linux 2023

3:12.4.254.21-1.22.22.2.1.amzn2023.0.2

fixed

v8-13.6-devel

Amazon Linux 2023

3:13.6.233.17-1.24.15.0.1.amzn2023.0.1

fixed

Azure Linux Releases

Azure Package

Release

rust

CBL-Mariner 2.0

0:1.72.0-15.cm2

fixed

zlib

Azure Linux 3.0

0:1.3.2-1.azl3

fixed

Known Exploits!

https://github.com/madler/zlib/issues/904

Common Weakness Enumeration

CWE-1284 - Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Vulnerability Media Exposure

[GERMAN] Dell PowerProtect Data Domain: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um seine Privilegien zu erhöhen um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, und um Dateien zu manipulieren.
Published: 2026-07-02T22:00:00+00:00

References

https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/

https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf

https://github.com/madler/zlib/issues/904

https://github.com/madler/zlib/releases/tag/v1.3.2

https://ostif.org/zlib-audit-complete/

https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf