CVE-2026-3381

Katalog CVE

CVSS 9.8 · Critical EPSS 0,79%

Kerentanan Improper Validation of Specified Quantity in Input pada pmqs compress. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP.

Deskripsi (NVD)

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Rincian

Terbit di NVD

5 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1284: Improper Validation of Specified Quantity in Input

EPSS (30 hari)

0,79% peluang dieksploitasi; lebih tinggi dari 55,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/ advisory pihak ketiga
• https://www.cve.org/CVERecord?id=CVE-2026-27171 advisory pihak ketiga
• https://github.com/madler/zlib product
• https://github.com/madler/zlib/releases/tag/v1.3.2 release notes
• https://github.com/pmqs/Compress-Raw-Zlib/issues/41 issue tracking
• https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.221/source/Changes product · release notes
• https://www.zlib.net/ product