Vulnerabilities > CVE-2018-25032 - Out-of-bounds Write vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2022-03-25

Updated: 2023-11-07

Summary

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Vulnerable Configurations

Part	Description	Count
Application	Zlib Zlib Zlib - Zlib Zlib 0.3 Zlib Zlib 0.4 Zlib Zlib 0.5 Zlib Zlib 0.6 Zlib Zlib 0.7 Zlib Zlib 0.8 Zlib Zlib 0.9 Zlib Zlib 0.61 Zlib Zlib 0.71 Zlib Zlib 0.91 Zlib Zlib 0.92 Zlib Zlib 0.93 Zlib Zlib 0.94 Zlib Zlib 0.95 Zlib Zlib 0.99 Zlib Zlib 1.0 Zlib Zlib 1.0.1 Zlib Zlib 1.0.2 Zlib Zlib 1.0.3 Zlib Zlib 1.0.4 Zlib Zlib 1.0.5 Zlib Zlib 1.0.6 Zlib Zlib 1.0.7 Zlib Zlib 1.0.8 Zlib Zlib 1.0.9 Zlib Zlib 1.1 Zlib Zlib 1.1.0 Zlib Zlib 1.1.1 Zlib Zlib 1.1.2 Zlib Zlib 1.1.3 Zlib Zlib 1.1.4 Zlib Zlib 1.2.0 Zlib Zlib 1.2.0.1 Zlib Zlib 1.2.0.2 Zlib Zlib 1.2.0.3 Zlib Zlib 1.2.0.4 Zlib Zlib 1.2.0.5 Zlib Zlib 1.2.0.6 Zlib Zlib 1.2.0.7 Zlib Zlib 1.2.0.8 Zlib Zlib 1.2.1 Zlib Zlib 1.2.1.1 Zlib Zlib 1.2.1.2 Zlib Zlib 1.2.2 Zlib Zlib 1.2.2.1 Zlib Zlib 1.2.2.2 Zlib Zlib 1.2.2.3 Zlib Zlib 1.2.2.4 Zlib Zlib 1.2.3 Zlib Zlib 1.2.3.1 Zlib Zlib 1.2.3.2 Zlib Zlib 1.2.3.3 Zlib Zlib 1.2.3.4 Zlib Zlib 1.2.3.5 Zlib Zlib 1.2.3.6 Zlib Zlib 1.2.3.7 Zlib Zlib 1.2.3.8 Zlib Zlib 1.2.3.9 Zlib Zlib 1.2.4 Zlib Zlib 1.2.4.1 Zlib Zlib 1.2.4.2 Zlib Zlib 1.2.4.3 Zlib Zlib 1.2.4.4 Zlib Zlib 1.2.4.5 Zlib Zlib 1.2.5 Zlib Zlib 1.2.5.1 Zlib Zlib 1.2.5.2 Zlib Zlib 1.2.5.3 Zlib Zlib 1.2.6 Zlib Zlib 1.2.6.1 Zlib Zlib 1.2.7 Zlib Zlib 1.2.7.1 Zlib Zlib 1.2.7.2 Zlib Zlib 1.2.7.3 Zlib Zlib 1.2.8 Zlib Zlib 1.2.9 Zlib Zlib 1.2.10 Zlib Zlib 1.2.11 Zlib Zlib 1.2.12	80
Application	Python Python Python 3.10.0 Python Python 3.10.1 Python Python 3.10.2 Python Python 3.10.3 Python Python 3.10.4 Python Python 3.9.0 Python Python 3.9.1 Python Python 3.9.2 Python Python 3.9.3 Python Python 3.9.4 Python Python 3.9.5 Python Python 3.9.6 Python Python 3.9.7 Python Python 3.9.8 Python Python 3.9.9 Python Python 3.9.10 Python Python 3.9.11 Python Python 3.9.12 Python Python 3.7.0 Python Python 3.7.1 Python Python 3.7.2 Python Python 3.7.3 Python Python 3.7.4 Python Python 3.7.5 Python Python 3.7.6 Python Python 3.7.7 Python Python 3.7.8 Python Python 3.7.9 Python Python 3.7.10 Python Python 3.7.11 Python Python 3.7.12 Python Python 3.7.13 Python Python 3.8.0 Python Python 3.8.0B1 Python Python 3.8.1 Python Python 3.8.2 Python Python 3.8.3 Python Python 3.8.4 Python Python 3.8.5 Python Python 3.8.6 Python Python 3.8.7 Python Python 3.8.8 Python Python 3.8.9 Python Python 3.8.10 Python Python 3.8.11 Python Python 3.8.12 Python Python 3.8.13	125
Application	Mariadb Mariadb Mariadb 10.3.0 Mariadb Mariadb 10.3.1 Mariadb Mariadb 10.3.2 Mariadb Mariadb 10.3.3 Mariadb Mariadb 10.3.4 Mariadb Mariadb 10.3.5 Mariadb Mariadb 10.3.6 Mariadb Mariadb 10.3.7 Mariadb Mariadb 10.3.8 Mariadb Mariadb 10.3.9 Mariadb Mariadb 10.3.10 Mariadb Mariadb 10.3.11 Mariadb Mariadb 10.3.12 Mariadb Mariadb 10.3.13 Mariadb Mariadb 10.3.14 Mariadb Mariadb 10.3.15 Mariadb Mariadb 10.3.16 Mariadb Mariadb 10.3.17 Mariadb Mariadb 10.3.18 Mariadb Mariadb 10.3.19 Mariadb Mariadb 10.3.20 Mariadb Mariadb 10.3.21 Mariadb Mariadb 10.3.22 Mariadb Mariadb 10.3.23 Mariadb Mariadb 10.3.24 Mariadb Mariadb 10.3.25 Mariadb Mariadb 10.3.26 Mariadb Mariadb 10.3.27 Mariadb Mariadb 10.3.28 Mariadb Mariadb 10.3.29 Mariadb Mariadb 10.3.30 Mariadb Mariadb 10.3.31 Mariadb Mariadb 10.3.32 Mariadb Mariadb 10.3.33 Mariadb Mariadb 10.3.34 Mariadb Mariadb 10.3.35 Mariadb Mariadb 10.4.0 Mariadb Mariadb 10.4.1 Mariadb Mariadb 10.4.2 Mariadb Mariadb 10.4.3 Mariadb Mariadb 10.4.4 Mariadb Mariadb 10.4.5 Mariadb Mariadb 10.4.6 Mariadb Mariadb 10.4.7 Mariadb Mariadb 10.4.8 Mariadb Mariadb 10.4.9 Mariadb Mariadb 10.4.10 Mariadb Mariadb 10.4.11 Mariadb Mariadb 10.4.12 Mariadb Mariadb 10.4.13 Mariadb Mariadb 10.4.14 Mariadb Mariadb 10.4.15 Mariadb Mariadb 10.4.16 Mariadb Mariadb 10.4.17 Mariadb Mariadb 10.4.18 Mariadb Mariadb 10.4.19 Mariadb Mariadb 10.4.20 Mariadb Mariadb 10.4.21 Mariadb Mariadb 10.4.22 Mariadb Mariadb 10.4.23 Mariadb Mariadb 10.4.24 Mariadb Mariadb 10.4.25 Mariadb Mariadb 10.5.0 Mariadb Mariadb 10.5.1 Mariadb Mariadb 10.5.2 Mariadb Mariadb 10.5.3 Mariadb Mariadb 10.5.4 Mariadb Mariadb 10.5.5 Mariadb Mariadb 10.5.6 Mariadb Mariadb 10.5.7 Mariadb Mariadb 10.5.8 Mariadb Mariadb 10.5.9 Mariadb Mariadb 10.5.10 Mariadb Mariadb 10.5.11 Mariadb Mariadb 10.5.12 Mariadb Mariadb 10.5.13 Mariadb Mariadb 10.5.14 Mariadb Mariadb 10.5.15 Mariadb Mariadb 10.5.16 Mariadb Mariadb 10.6.0 Mariadb Mariadb 10.6.1 Mariadb Mariadb 10.6.2 Mariadb Mariadb 10.6.3 Mariadb Mariadb 10.6.4 Mariadb Mariadb 10.6.5 Mariadb Mariadb 10.6.6 Mariadb Mariadb 10.6.7 Mariadb Mariadb 10.6.8 Mariadb Mariadb 10.7.0 Mariadb Mariadb 10.7.1 Mariadb Mariadb 10.7.2 Mariadb Mariadb 10.7.3 Mariadb Mariadb 10.7.4 Mariadb Mariadb 10.8.0 Mariadb Mariadb 10.8.1 Mariadb Mariadb 10.8.2 Mariadb Mariadb 10.8.3 Mariadb Mariadb 10.9.0 Mariadb Mariadb 10.9.1	99
Application	Netapp Netapp Oncommand Workflow Automation - Netapp Ontap Select Deploy Administration Utility - Netapp Active IQ Unified Manager - Netapp Management Services FOR Element Software - Netapp E Series Santricity OS Controller 11.0.0 Netapp E Series Santricity OS Controller 11.20 Netapp E Series Santricity OS Controller 11.25 Netapp E Series Santricity OS Controller 11.30 Netapp E Series Santricity OS Controller 11.30.5R3 Netapp E Series Santricity OS Controller 11.40 Netapp E Series Santricity OS Controller 11.40.3R2 Netapp E Series Santricity OS Controller 11.40.5 Netapp E Series Santricity OS Controller 11.50.1 Netapp E Series Santricity OS Controller 11.50.2 Netapp E Series Santricity OS Controller 11.60 Netapp E Series Santricity OS Controller 11.60.0 Netapp E Series Santricity OS Controller 11.60.1 Netapp E Series Santricity OS Controller 11.60.3 Netapp E Series Santricity OS Controller 11.70.1 Netapp E Series Santricity OS Controller 11.70.2	21
Application	Azul Azul Zulu 7.52 Azul Zulu 8.60 Azul Zulu 11.54 Azul Zulu 13.46 Azul Zulu 15.38 Azul Zulu 17.32 Azul Zulu 6.45	7
Application	Goto Goto Gotoassist *	1
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0	3
OS	Fedoraproject Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36	3
OS	Apple Apple MAC OS X 10.15 Apple MAC OS X 10.15.1 Apple MAC OS X 10.15.4 Apple MAC OS X 10.15.5 Apple MAC OS X 10.15.6 Apple MAC OS X 10.15.7 Apple Macos 11.0 Apple Macos 11.0.1 Apple Macos 11.1 Apple Macos 11.1.0 Apple Macos 11.2 Apple Macos 11.2.1 Apple Macos 11.3 Apple Macos 11.3.1 Apple Macos 11.4 Apple Macos 11.5 Apple Macos 11.6 Apple Macos 11.6.1 Apple Macos 11.6.2 Apple Macos 11.6.3 Apple Macos 11.6.5 Apple Macos 12.0.0 Apple Macos 12.0.1 Apple Macos 12.1 Apple Macos 12.2 Apple Macos 12.2.1 Apple Macos 12.3	40
OS	Netapp Netapp H300S Firmware - Netapp H500S Firmware - Netapp H700S Firmware - Netapp H410S Firmware - Netapp H410C Firmware -	5
OS	Siemens Siemens Scalance Sc622 2C Firmware - Siemens Scalance Sc622 2C Firmware 2.3 Siemens Scalance Sc626 2C Firmware - Siemens Scalance Sc626 2C Firmware 2.3 Siemens Scalance Sc632 2C Firmware - Siemens Scalance Sc632 2C Firmware 2.3 Siemens Scalance Sc636 2C Firmware - Siemens Scalance Sc636 2C Firmware 2.3 Siemens Scalance Sc642 2C Firmware - Siemens Scalance Sc642 2C Firmware 2.3 Siemens Scalance Sc646 2C Firmware - Siemens Scalance Sc646 2C Firmware 2.3	12
Hardware	Netapp Netapp HCI Compute Node - Netapp H300S - Netapp H500S - Netapp H700S - Netapp H410S - Netapp H410C -	6
Hardware	Siemens Siemens Scalance Sc622 2C - Siemens Scalance Sc626 2C - Siemens Scalance Sc632 2C - Siemens Scalance Sc636 2C - Siemens Scalance Sc642 2C - Siemens Scalance Sc646 2C -	6

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Related news

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.