← Back

CVE-2018-25032

nvd nist
Published: Mar 25, 2022Modified: Jul 14, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Affected (61)

Products: Nokogiri: Nokogiri · Python: Python · Zlib: Zlib · +8 more
Show all products
Nokogiri: Nokogiri · Python: Python · Zlib: Zlib · Debian: Debian Linux · Fedoraproject: Fedora · Apple: Mac Os X, Macos · Mariadb: Mariadb · Netapp: Active Iq Unified Manager, E Series Santricity Os Controller, Hci Compute Node, Management Services For Element Software, Oncommand Workflow Automation, Ontap Select Deploy Administration Utility, H300s Firmware, H500s Firmware, H700s Firmware, H410s Firmware, H410c Firmware · Siemens: Scalance Sc622 2c Firmware, Scalance Sc626 2c Firmware, Scalance Sc632 2c Firmware, Scalance Sc636 2c Firmware, Scalance Sc642 2c Firmware, Scalance Sc646 2c Firmware · Azul: Zulu · Goto: Gotoassist
Nokogiri
1 product
Nokogiri
Python
1 product
Python
Zlib
1 product
Zlib
Debian
1 product
Debian Linux
Fedoraproject
1 product
Fedora
Apple
2 products
Mac Os X
Macos
Mariadb
1 product
Mariadb
Netapp
11 products
Active Iq Unified Manager
E Series Santricity Os Controller
Hci Compute Node
Management Services For Element Software
Oncommand Workflow Automation
Ontap Select Deploy Administration Utility
H300s Firmware
H500s Firmware
H700s Firmware
H410s Firmware
H410c Firmware
Siemens
6 products
Scalance Sc622 2c Firmware
Scalance Sc626 2c Firmware
Scalance Sc632 2c Firmware
Scalance Sc636 2c Firmware
Scalance Sc642 2c Firmware
Scalance Sc646 2c Firmware
Azul
1 product
Zulu
Goto
1 product
Gotoassist
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Nokogiri
Before 1.13.4
Configuration B
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Python
Python
From 3.10.0 to 3.10.5
Python
From 3.7.0 to 3.7.14
Python
From 3.8.0 to 3.8.14
Python
From 3.9.0 to 3.9.13
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Zlib
From 1.2.2.2 to 1.2.12
Configuration D
3 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 11.0
Debian Linux
Version 9.0
Configuration E
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 34
Fedora
Version 35
Fedora
Version 36
Configuration F
17 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Mac Os X
From 10.15 to 10.15.7
Mac Os X
Version 10.15.7
Mac Os X
Version 10.15.7 security_update_2020-001
Mac Os X
Version 10.15.7 security_update_2020-005
Mac Os X
Version 10.15.7 security_update_2020-007
Mac Os X
Version 10.15.7 security_update_2020
Mac Os X
Version 10.15.7 security_update_2021-001
Mac Os X
Version 10.15.7 security_update_2021-002
Mac Os X
Version 10.15.7 security_update_2021-003
Mac Os X
Version 10.15.7 security_update_2021-006
Mac Os X
Version 10.15.7 security_update_2021-007
Mac Os X
Version 10.15.7 security_update_2021-008
Mac Os X
Version 10.15.7 security_update_2022-001
Mac Os X
Version 10.15.7 security_update_2022-002
Mac Os X
Version 10.15.7 security_update_2022-003
Apple
Macos
From 11.0 to 11.6.6
Macos
From 12.0.0 to 12.4
Configuration G
7 vulnerable
Vulnerable SoftwareAffected Versions
Mariadb
Mariadb
From 10.3.0 to 10.3.36
Mariadb
From 10.4.0 to 10.4.26
Mariadb
From 10.5.0 to 10.5.17
Mariadb
From 10.6.0 to 10.6.9
Mariadb
From 10.7.0 to 10.7.5
Mariadb
From 10.8.0 to 10.8.4
Mariadb
From 10.9.0 to 10.9.2
Configuration H
6 vulnerable
Vulnerable SoftwareAffected Versions
Active Iq Unified Manager
All versions
E Series Santricity Os Controller
From 11.0.0 to 11.70.2
Hci Compute Node
All versions
Management Services For Element Software
All versions
Oncommand Workflow Automation
All versions
Ontap Select Deploy Administration Utility
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300s Firmware
All versions
Running on/withPlatform Versions
Netapp
H300s
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500s Firmware
All versions
Running on/withPlatform Versions
Netapp
H500s
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700s Firmware
All versions
Running on/withPlatform Versions
Netapp
H700s
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410s Firmware
All versions
Running on/withPlatform Versions
Netapp
H410s
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410c Firmware
All versions
Running on/withPlatform Versions
Netapp
H410c
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance Sc622 2c Firmware
Before 3.0
Running on/withPlatform Versions
Siemens
Scalance Sc622 2c
All versions
Configuration O
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance Sc626 2c Firmware
Before 3.0
Running on/withPlatform Versions
Siemens
Scalance Sc626 2c
All versions
Configuration P
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance Sc632 2c Firmware
Before 3.0
Running on/withPlatform Versions
Siemens
Scalance Sc632 2c
All versions
Configuration Q
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance Sc636 2c Firmware
Before 3.0
Running on/withPlatform Versions
Siemens
Scalance Sc636 2c
All versions
Configuration R
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance Sc642 2c Firmware
Before 3.0
Running on/withPlatform Versions
Siemens
Scalance Sc642 2c
All versions
Configuration S
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance Sc646 2c Firmware
Before 3.0
Running on/withPlatform Versions
Siemens
Scalance Sc646 2c
All versions
Configuration T
7 vulnerable
Vulnerable SoftwareAffected Versions
Azul
Zulu
Version 11.54
Zulu
Version 13.46
Zulu
Version 15.38
Zulu
Version 17.32
Zulu
Version 6.45
Zulu
Version 7.52
Zulu
Version 8.60
Configuration U
1 vulnerable
Vulnerable SoftwareAffected Versions
Gotoassist
Before 11.9.18

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (64)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
ExploitMailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Issue TrackingPatchThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
ExploitMailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.