Zlib vulnerability CVE-2023-45853

[danielkfl]

Hi Everyone,

We received a CVSS 9.8 rated finding in our open source scans, which is related to zlib.
https://nvd.nist.gov/vuln/detail/CVE-2023-45853

SInce InstallShield uses zlib as an oss component, can you please check if this is a valid finding and provide a hotfix if needed?

Best regards,
Daniel

[cvirata · Accepted solution]

Hello @danielkfl - 

Based on our analysis, InstallShield is not susceptible to this vulnerability. We've published the following article to help address any concerns regarding this. 

https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-45853-zlib-vulnerability-impact-on-InstallShield/ta-p/309926/jump-to/first-unread-message