CVE search · CVE-2018-25032
CVE-2018-25032
high 7.5
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-787
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
nvd@nist.govPrimary |
| CVSS 3.1 | high 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
| CVSS 2.0 | medium 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- nokogiri · nokogiri
- python · python
- zlib · zlib
- debian · debian_linux
- fedoraproject · fedora
- apple · mac_os_x
- apple · macos
- mariadb · mariadb
- netapp · active_iq_unified_manager
- netapp · e-series_santricity_os_controller
- netapp · management_services_for_element_software
- netapp · oncommand_workflow_automation
- netapp · ontap_select_deploy_administration_utility
- netapp · hci_compute_node
- netapp · h300s_firmware
- netapp · h500s_firmware
- netapp · h700s_firmware
- netapp · h410s_firmware
- netapp · h410c_firmware
- siemens · scalance_sc622-2c_firmware
- siemens · scalance_sc626-2c_firmware
- siemens · scalance_sc632-2c_firmware
- siemens · scalance_sc636-2c_firmware
- siemens · scalance_sc642-2c_firmware
- siemens · scalance_sc646-2c_firmware
- azul · zulu
- goto · gotoassist
References
- http://seclists.org/fulldisclosure/2022/May/33Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2022/May/35Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2022/May/38Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2022/03/25/2Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2022/03/26/1ExploitMailing ListThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdfThird Party Advisory
- https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531PatchThird Party Advisory
- https://github.com/madler/zlib/compare/v1.2.11...v1.2.12PatchThird Party Advisory
- https://github.com/madler/zlib/issues/605Issue TrackingPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/04/msg00000.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/05/msg00008.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/09/msg00023.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/Third Party Advisory
- https://security.gentoo.org/glsa/202210-42Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220526-0009/Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220729-0004/Third Party Advisory
- https://support.apple.com/kb/HT213255Third Party Advisory
- https://support.apple.com/kb/HT213256Third Party Advisory
- https://support.apple.com/kb/HT213257Third Party Advisory
- https://www.debian.org/security/2022/dsa-5111PatchThird Party Advisory
- https://www.openwall.com/lists/oss-security/2022/03/24/1Mailing ListThird Party Advisory
- https://www.openwall.com/lists/oss-security/2022/03/28/1ExploitMailing ListThird Party Advisory
- https://www.openwall.com/lists/oss-security/2022/03/28/3Mailing ListThird Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.htmlPatchThird Party Advisory
- http://seclists.org/fulldisclosure/2022/May/33Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2022/May/35Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2022/May/38Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2022/03/25/2Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2022/03/26/1ExploitMailing ListThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdfThird Party Advisory
- https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531PatchThird Party Advisory
- https://github.com/madler/zlib/compare/v1.2.11...v1.2.12PatchThird Party Advisory
- https://github.com/madler/zlib/issues/605Issue TrackingPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/04/msg00000.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/05/msg00008.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/09/msg00023.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/Third Party Advisory
- https://security.gentoo.org/glsa/202210-42Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220526-0009/Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220729-0004/Third Party Advisory
- https://support.apple.com/kb/HT213255Third Party Advisory
- https://support.apple.com/kb/HT213256Third Party Advisory
- https://support.apple.com/kb/HT213257Third Party Advisory
- https://www.debian.org/security/2022/dsa-5111PatchThird Party Advisory
- https://www.openwall.com/lists/oss-security/2022/03/24/1Mailing ListThird Party Advisory
- https://www.openwall.com/lists/oss-security/2022/03/28/1ExploitMailing ListThird Party Advisory
- https://www.openwall.com/lists/oss-security/2022/03/28/3Mailing ListThird Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.htmlPatchThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-333517.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-419740.html
- https://cert-portal.siemens.com/productcert/html/ssa-470355.html
- https://cert-portal.siemens.com/productcert/html/ssa-565386.html
- https://cert-portal.siemens.com/productcert/html/ssa-942865.html