SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 69719: SAS® products contain a version of zlib affected by CVE-2022-37434

DetailsHotfixAboutRate It

Severity: Critical

Description: Multiple SAS products contains a version of zlib known to be affected by CVE-2022-37434.

Potential Impact: Refer to the CVE above for vulnerability details. SAS does not use the impacted inflateGetHeader class and thus is not affected by the vulnerability. However, it might be flagged as a critical severity issue by security scanners.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemBase SASz/OS9.4_M79.4 TS1M7
z/OS 64-bit9.4_M79.4 TS1M7
Microsoft® Windows® for x649.4_M79.4 TS1M7
Microsoft Windows 8 Enterprise 32-bit9.4_M79.4 TS1M7
Microsoft Windows 8 Enterprise x649.4_M79.4 TS1M7
Microsoft Windows 8 Pro 32-bit9.4_M79.4 TS1M7
Microsoft Windows 8 Pro x649.4_M79.4 TS1M7
Microsoft Windows 8.1 Enterprise 32-bit9.4_M79.4 TS1M7
Microsoft Windows 8.1 Enterprise x649.4_M79.4 TS1M7
Microsoft Windows 8.1 Pro 32-bit9.4_M79.4 TS1M7
Microsoft Windows 8.1 Pro x649.4_M79.4 TS1M7
Microsoft Windows 109.4_M79.4 TS1M7
Microsoft Windows 119.4_M79.4 TS1M7
Microsoft Windows Server 20089.4_M79.4 TS1M7
Microsoft Windows Server 2008 R29.4_M79.4 TS1M7
Microsoft Windows Server 2008 for x649.4_M79.4 TS1M7
Microsoft Windows Server 2012 Datacenter9.4_M79.4 TS1M7
Microsoft Windows Server 2012 R2 Datacenter9.4_M79.4 TS1M7
Microsoft Windows Server 2012 R2 Std9.4_M79.4 TS1M7
Microsoft Windows Server 2012 Std9.4_M79.4 TS1M7
Microsoft Windows Server 20169.4_M79.4 TS1M7
Microsoft Windows Server 20199.4_M79.4 TS1M7
Microsoft Windows Server 20229.4_M79.4 TS1M7
Windows 7 Enterprise 32 bit9.4_M79.4 TS1M7
Windows 7 Enterprise x649.4_M79.4 TS1M7
Windows 7 Home Premium 32 bit9.4_M79.4 TS1M7
Windows 7 Home Premium x649.4_M79.4 TS1M7
Windows 7 Professional 32 bit9.4_M79.4 TS1M7
Windows 7 Professional x649.4_M79.4 TS1M7
Windows 7 Ultimate 32 bit9.4_M79.4 TS1M7
Windows 7 Ultimate x649.4_M79.4 TS1M7
64-bit Enabled AIX9.4_M79.4 TS1M7
64-bit Enabled Solaris9.4_M79.4 TS1M7
HP-UX IPF9.4_M79.4 TS1M7
Linux for x649.4_M79.4 TS1M7
Solaris for x649.4_M79.4 TS1M7
SAS SystemSAS ViyaMicrosoft® Windows® for x643.5Viya
Microsoft Windows 8 Enterprise 32-bit3.5Viya
Microsoft Windows 8 Enterprise x643.5Viya
Microsoft Windows 8 Pro 32-bit3.5Viya
Microsoft Windows 8 Pro x643.5Viya
Microsoft Windows 8.1 Enterprise 32-bit3.5Viya
Microsoft Windows 8.1 Enterprise x643.5Viya
Microsoft Windows 8.1 Pro 32-bit3.5Viya
Microsoft Windows 8.1 Pro x643.5Viya
Microsoft Windows 103.5Viya
Microsoft Windows 113.5Viya
Microsoft Windows 95/983.5Viya
Microsoft Windows 2000 Advanced Server3.5Viya
Microsoft Windows 2000 Datacenter Server3.5Viya
Microsoft Windows 2000 Server3.5Viya
Microsoft Windows 2000 Professional3.5Viya
Microsoft Windows NT Workstation3.5Viya
Microsoft Windows Server 2003 Datacenter Edition3.5Viya
Microsoft Windows Server 2003 Enterprise Edition3.5Viya
Microsoft Windows Server 2003 Standard Edition3.5Viya
Microsoft Windows Server 2003 for x643.5Viya
Microsoft Windows Server 20083.5Viya
Microsoft Windows Server 2008 R23.5Viya
Microsoft Windows Server 2008 for x643.5Viya
Microsoft Windows Server 2012 Datacenter3.5Viya
Microsoft Windows Server 2012 R2 Datacenter3.5Viya
Microsoft Windows Server 2012 R2 Std3.5Viya
Microsoft Windows Server 2012 Std3.5Viya
Microsoft Windows Server 20163.5Viya
Microsoft Windows Server 20193.5Viya
Microsoft Windows Server 20223.5Viya
Microsoft Windows XP Professional3.5Viya
Windows 7 Enterprise 32 bit3.5Viya
Windows 7 Enterprise x643.5Viya
Windows 7 Home Premium 32 bit3.5Viya
Windows 7 Home Premium x643.5Viya
Windows 7 Professional 32 bit3.5Viya
Windows 7 Professional x643.5Viya
Windows 7 Ultimate 32 bit3.5Viya
Windows 7 Ultimate x643.5Viya
Windows Millennium Edition (Me)3.5Viya
Windows Vista3.5Viya
Windows Vista for x643.5Viya
Linux for x643.5Viya
SAS SystemSAS Demand PlanningLinux for x648.24Viya
SAS SystemSAS Federation Server64-bit Enabled AIX4.59.4 TS1M8
Linux for x644.59.4 TS1M8
Microsoft® Windows® for x644.59.4 TS1M8
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.