CVE-2018-25032
CVE-2018-25032
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVSS 7.5 · High · EPSS 51.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libz-mingw-w64 Debian:12
- Affected ranges
- ECOSYSTEM: < 1.2.11+dfsg-5
Update to 1.2.11+dfsg-5
libz-mingw-w64 Debian:13
- Affected ranges
- ECOSYSTEM: < 1.2.11+dfsg-5
Update to 1.2.11+dfsg-5
libz-mingw-w64 Debian:14
- Affected ranges
- ECOSYSTEM: < 1.2.11+dfsg-5
Update to 1.2.11+dfsg-5
zlib Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.2.11.dfsg-4
Update to 1:1.2.11.dfsg-4
zlib Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.2.11.dfsg-4
Update to 1:1.2.11.dfsg-4
zlib Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.2.11.dfsg-4
Update to 1:1.2.11.dfsg-4
klibc Ubuntu:Pro:14.04:LTS
- Versions
- 2.0.1-3.1ubuntu2
- 2.0.2-1ubuntu1
- 2.0.2-1ubuntu2
- 2.0.3-0ubuntu1
- 2.0.3-0ubuntu1.14.04.1
- 2.0.3-0ubuntu1.14.04.2
- 2.0.3-0ubuntu1.14.04.3
- 2.0.3-0ubuntu1.14.04.3+esm2
- Affected ranges
- ECOSYSTEM: < 2.0.3-0ubuntu1.14.04.3+esm3
Update to 2.0.3-0ubuntu1.14.04.3+esm3
zlib Ubuntu:Pro:14.04:LTS
- Versions
- 1:1.2.8.dfsg-1ubuntu1
- 1:1.2.8.dfsg-1ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 1:1.2.8.dfsg-1ubuntu1.1+esm1
Update to 1:1.2.8.dfsg-1ubuntu1.1+esm1
klibc Ubuntu:Pro:16.04:LTS
- Versions
- 2.0.3-0ubuntu1
- 2.0.4-4
- 2.0.4-6
- 2.0.4-7
- 2.0.4-8
- 2.0.4-8ubuntu1
- 2.0.4-8ubuntu1.16.04.1
- 2.0.4-8ubuntu1.16.04.2
- 2.0.4-8ubuntu1.16.04.3
- 2.0.4-8ubuntu1.16.04.4
- 2.0.4-8ubuntu1.16.04.4+esm1
- Affected ranges
- ECOSYSTEM: < 2.0.4-8ubuntu1.16.04.4+esm2
Update to 2.0.4-8ubuntu1.16.04.4+esm2
rsync Ubuntu:Pro:16.04:LTS
- Versions
- 3.1.1-3
- 3.1.1-3ubuntu1
- 3.1.1-3ubuntu1.1
- 3.1.1-3ubuntu1.2
- 3.1.1-3ubuntu1.3
- Affected ranges
- ECOSYSTEM: < 3.1.1-3ubuntu1.3+esm1
Update to 3.1.1-3ubuntu1.3+esm1
zlib Ubuntu:Pro:16.04:LTS
- Versions
- 1:1.2.8.dfsg-2ubuntu4
- 1:1.2.8.dfsg-2ubuntu4.1
- 1:1.2.8.dfsg-2ubuntu4.3
- Affected ranges
- ECOSYSTEM: < 1:1.2.8.dfsg-2ubuntu4.3+esm1
Update to 1:1.2.8.dfsg-2ubuntu4.3+esm1
rsync Ubuntu:18.04:LTS
- Versions
- 3.1.2-2
- 3.1.2-2.1
- 3.1.2-2.1ubuntu1
- 3.1.2-2.1ubuntu1.1
- 3.1.2-2.1ubuntu1.2
- 3.1.2-2.1ubuntu1.3
- Affected ranges
- ECOSYSTEM: < 3.1.2-2.1ubuntu1.4
Update to 3.1.2-2.1ubuntu1.4
zlib Ubuntu:18.04:LTS
- Versions
- 1:1.2.11.dfsg-0ubuntu2
- Affected ranges
- ECOSYSTEM: < 1:1.2.11.dfsg-0ubuntu2.1
Update to 1:1.2.11.dfsg-0ubuntu2.1
klibc Ubuntu:Pro:18.04:LTS
- Versions
- 2.0.4-9ubuntu1
- 2.0.4-9ubuntu2
- 2.0.4-9ubuntu2.1
- 2.0.4-9ubuntu2.2
- Affected ranges
- ECOSYSTEM: < 2.0.4-9ubuntu2.2+esm1
Update to 2.0.4-9ubuntu2.2+esm1
klibc Ubuntu:20.04:LTS
- Versions
- 2.0.6-1ubuntu1
- 2.0.6-1ubuntu2
- 2.0.7-1ubuntu1
- 2.0.7-1ubuntu3
- 2.0.7-1ubuntu4
- 2.0.7-1ubuntu5
- 2.0.7-1ubuntu5.1
- Affected ranges
- ECOSYSTEM: < 2.0.7-1ubuntu5.2
Update to 2.0.7-1ubuntu5.2
mariadb-10.3 Ubuntu:20.04:LTS
- Versions
- 1:10.3.17-1
- 1:10.3.18-1
- 1:10.3.19-1
- 1:10.3.21-2
- 1:10.3.22-1
- 1:10.3.22-1ubuntu1
- 1:10.3.25-0ubuntu0.20.04.1
- 1:10.3.29-0ubuntu0.20.04.1
- 1:10.3.30-0ubuntu0.20.04.1
- 1:10.3.31-0ubuntu0.20.04.1
- 1:10.3.32-0ubuntu0.20.04.1
- 1:10.3.34-0ubuntu0.20.04.1
- Affected ranges
- ECOSYSTEM: < 1:10.3.37-0ubuntu0.20.04.1
Update to 1:10.3.37-0ubuntu0.20.04.1
rsync Ubuntu:20.04:LTS
- Versions
- 3.1.3-6
- 3.1.3-8
- 3.1.3-8ubuntu0.1
- 3.1.3-8ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 3.1.3-8ubuntu0.3
Update to 3.1.3-8ubuntu0.3
zlib Ubuntu:20.04:LTS
- Versions
- 1:1.2.11.dfsg-1ubuntu3
- 1:1.2.11.dfsg-2ubuntu1
- 1:1.2.11.dfsg-2ubuntu1.1
- 1:1.2.11.dfsg-2ubuntu1.2
- Affected ranges
- ECOSYSTEM: < 1:1.2.11.dfsg-2ubuntu1.3
Update to 1:1.2.11.dfsg-2ubuntu1.3
klibc Ubuntu:22.04:LTS
- Versions
- 2.0.8-6.1ubuntu2
- 2.0.10-3
- 2.0.10-4
- Affected ranges
- ECOSYSTEM: < 2.0.10-4ubuntu0.1
Update to 2.0.10-4ubuntu0.1
mariadb-10.6 Ubuntu:22.04:LTS
- Versions
- 1:10.6.7-2ubuntu1
- 1:10.6.7-2ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 1:10.6.11-0ubuntu0.22.04.1
Update to 1:10.6.11-0ubuntu0.22.04.1
zlib Ubuntu:22.04:LTS
- Versions
- 1:1.2.11.dfsg-2ubuntu7
- Affected ranges
- ECOSYSTEM: < 1:1.2.11.dfsg-2ubuntu9
Update to 1:1.2.11.dfsg-2ubuntu9
klibc Ubuntu:24.04:LTS
- Versions
- 2.0.13-1
- 2.0.13-2
- 2.0.13-2ubuntu1
- 2.0.13-4
- Affected ranges
- ECOSYSTEM: < 2.0.13-4ubuntu0.1
Update to 2.0.13-4ubuntu0.1
Original sources
- https://www.openwall.com/lists/oss-security/2022/03/24/1
- https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
- http://www.openwall.com/lists/oss-security/2022/03/25/2
- http://www.openwall.com/lists/oss-security/2022/03/26/1
- https://www.debian.org/security/2022/dsa-5111
- https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/
- https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html
- http://seclists.org/fulldisclosure/2022/May/33
- http://seclists.org/fulldisclosure/2022/May/35
- http://seclists.org/fulldisclosure/2022/May/38
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.openwall.com/lists/oss-security/2022/03/28/3
- https://www.openwall.com/lists/oss-security/2022/03/28/1
- https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
- https://github.com/madler/zlib/issues/605
- https://support.apple.com/kb/HT213257
- https://support.apple.com/kb/HT213256
- https://support.apple.com/kb/HT213255
- https://security.netapp.com/advisory/ntap-20220526-0009/
- https://nvd.nist.gov/vuln/detail/CVE-2018-25032