CVE-2018-25032

Vulnerable Software	Affected Versions
Python Python	3.10.0 ≤ version < 3.10.5
Python Python	3.7.0 ≤ version < 3.7.14
Python Python	3.8.0 ≤ version < 3.8.14
Python Python	3.9.0 ≤ version < 3.9.13

Running on/with	Platform Versions
Microsoft Windows	All versions

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Zlib Zlib	1.2.2.2 ≤ version < 1.2.12

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 9.0

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35
Fedoraproject Fedora	Version 36

Configuration F

17 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	10.15 ≤ version < 10.15.7
Apple Mac Os X	Version 10.15.7
Apple Mac Os X	Version 10.15.7 security_update_2020-001
Apple Mac Os X	Version 10.15.7 security_update_2020-005
Apple Mac Os X	Version 10.15.7 security_update_2020-007
Apple Mac Os X	Version 10.15.7 security_update_2020
Apple Mac Os X	Version 10.15.7 security_update_2021-001
Apple Mac Os X	Version 10.15.7 security_update_2021-002
Apple Mac Os X	Version 10.15.7 security_update_2021-003
Apple Mac Os X	Version 10.15.7 security_update_2021-006
Apple Mac Os X	Version 10.15.7 security_update_2021-007
Apple Mac Os X	Version 10.15.7 security_update_2021-008
Apple Mac Os X	Version 10.15.7 security_update_2022-001
Apple Mac Os X	Version 10.15.7 security_update_2022-002
Apple Mac Os X	Version 10.15.7 security_update_2022-003
Apple Macos	11.0 ≤ version < 11.6.6
Apple Macos	12.0.0 ≤ version < 12.4

Configuration G

7 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	10.3.0 ≤ version < 10.3.36
Mariadb Mariadb	10.4.0 ≤ version < 10.4.26
Mariadb Mariadb	10.5.0 ≤ version < 10.5.17
Mariadb Mariadb	10.6.0 ≤ version < 10.6.9
Mariadb Mariadb	10.7.0 ≤ version < 10.7.5
Mariadb Mariadb	10.8.0 ≤ version < 10.8.4
Mariadb Mariadb	10.9.0 ≤ version < 10.9.2

Configuration H

6 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp E Series Santricity Os Controller	11.0.0 ≤ version ≤ 11.70.2
Netapp Hci Compute Node	All versions
Netapp Management Services For Element Software	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Ontap Select Deploy Administration Utility	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Sc622 2c Firmware	version < 3.0

Running on/with	Platform Versions
Siemens Scalance Sc622 2c	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Sc626 2c Firmware	version < 3.0

Running on/with	Platform Versions
Siemens Scalance Sc626 2c	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Sc632 2c Firmware	version < 3.0

Running on/with	Platform Versions
Siemens Scalance Sc632 2c	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Sc636 2c Firmware	version < 3.0

Running on/with	Platform Versions
Siemens Scalance Sc636 2c	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Sc642 2c Firmware	version < 3.0

Running on/with	Platform Versions
Siemens Scalance Sc642 2c	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Sc646 2c Firmware	version < 3.0

Running on/with	Platform Versions
Siemens Scalance Sc646 2c	All versions

Configuration T

7 vulnerable

Vulnerable Software	Affected Versions
Azul Zulu	Version 11.54
Azul Zulu	Version 13.46
Azul Zulu	Version 15.38
Azul Zulu	Version 17.32
Azul Zulu	Version 6.45
Azul Zulu	Version 7.52
Azul Zulu	Version 8.60

Configuration U

1 vulnerable

Vulnerable Software	Affected Versions
Goto Gotoassist	version < 11.9.18

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (64)

http://seclists.org/fulldisclosure/2022/May/33

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/35

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/38

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/03/25/2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/03/26/1

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf

Source: cve@mitre.org

Third Party Advisory

https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/madler/zlib/compare/v1.2.11...v1.2.12

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/madler/zlib/issues/605

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/

Source: cve@mitre.org

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/

Source: cve@mitre.org

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/

Source: cve@mitre.org

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/

Source: cve@mitre.org

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/

Source: cve@mitre.org

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/

Source: cve@mitre.org

Third Party Advisory

https://security.gentoo.org/glsa/202210-42

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220526-0009/

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220729-0004/

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT213255

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT213256

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT213257

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2022/dsa-5111

Source: cve@mitre.org

PatchThird Party Advisory

https://www.openwall.com/lists/oss-security/2022/03/24/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://www.openwall.com/lists/oss-security/2022/03/28/1

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

https://www.openwall.com/lists/oss-security/2022/03/28/3

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: cve@mitre.org

PatchThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/33