Lucene search
Alpine Linux Development TeamALPINE:CVE-2018-25032HistoryMar 25, 2022 - 9:15 a.m.
CVE-2018-25032
2022-03-2509:15:08
Alpine Linux Development Team
security.alpinelinux.org
33
zlib
memory corruption
fix
compression
distant matches
unix
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.4
Confidence
High
EPSS
0.003
Percentile
68.4%
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | minizip | <Â 1.2.12-r0 | UNKNOWN |
| Alpine | edge-main | noarch | mariadb | <Â 10.6.9-r0 | UNKNOWN |
| Alpine | edge-main | noarch | zlib | <Â 1.2.11-r4 | UNKNOWN |
| Alpine | 3.12-main | noarch | zlib | <Â 1.2.12-r0 | UNKNOWN |
| Alpine | 3.13-main | noarch | mariadb | <Â 10.5.17-r0 | UNKNOWN |
| Alpine | 3.13-main | noarch | zlib | <Â 1.2.12-r0 | UNKNOWN |
| Alpine | 3.14-main | noarch | mariadb | <Â 10.5.17-r0 | UNKNOWN |
| Alpine | 3.14-main | noarch | zlib | <Â 1.2.12-r0 | UNKNOWN |
| Alpine | 3.15-community | noarch | minizip | <Â 1.2.12-r0 | UNKNOWN |
| Alpine | 3.15-main | noarch | mariadb | <Â 10.6.9-r0 | UNKNOWN |
Related
nessus
nessus
RHEL 9 : zlib (RHSA-2022:4584)
2022-09-08 00:00:00
EulerOS Virtualization 2.10.0 : zlib (EulerOS-SA-2022-2105)
2022-07-15 00:00:00
EulerOS 2.0 SP9 : zlib (EulerOS-SA-2022-1986)
2022-07-08 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2993-1)
2022-05-08 00:00:00
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2022-2125)
2022-07-14 00:00:00
Ubuntu: Security Advisory (USN-5359-2)
2022-08-26 00:00:00
suse
suse
Security update for zlib (important)
2022-03-30 00:00:00
f5
f5
K21548854 : zlib vulnerability CVE-2018-25032
2022-05-19 00:00:00
redhat
redhat
(RHSA-2022:4592) Important: rsync security update
2022-05-18 00:11:33
(RHSA-2022:2198) Important: rsync security update
2022-05-11 13:17:49
(RHSA-2022:2192) Important: rsync security update
2022-05-11 13:03:31
redhatcve
redhatcve
CVE-2018-25032
2022-03-28 04:47:54
oraclelinux
oraclelinux
zlib security update
2022-06-30 00:00:00
rsync security update
2022-05-19 00:00:00
zlib security update
2022-05-12 00:00:00
ubuntu
ubuntu
rsync vulnerability
2022-03-31 00:00:00
zlib vulnerability
2022-03-30 00:00:00
rsync vulnerability
2022-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: rsync-3.2.3-15.fc36
2022-05-07 05:00:30
[SECURITY] Fedora 35 Update: rsync-3.2.3-9.fc35
2022-04-18 17:14:58
[SECURITY] Fedora 36 Update: zlib-1.2.11-32.fc36
2022-08-14 02:39:31
osv
osv
Windows: vulnerable zlib 1.2.11
2022-03-25 00:00:00
CGA-phgv-wf69-p9vc
2024-06-06 12:28:46
Important: zlib security update
2022-04-28 14:07:14
ubuntucve
ubuntucve
CVE-2018-25032
2022-03-25 00:00:00
debian
debian
[SECURITY] [DLA 2968-1] zlib security update
2022-04-02 21:16:08
[SECURITY] [DSA 5111-1] zlib security update
2022-04-01 15:20:47
[SECURITY] [DLA 2993-1] libz-mingw-w64 security update
2022-05-07 13:28:50
cbl_mariner
cbl_mariner
CVE-2018-25032 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1
2024-07-12 23:39:02
CVE-2018-25032 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1
2024-07-22 15:37:36
CVE-2018-25032 affecting package ccache for versions less than 3.6-3
2024-09-30 03:52:37
slackware
slackware
[slackware-security] zlib
2022-03-28 19:37:07
ibm
ibm
Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to denial of service due to zlib (CVE-2018-25032)
2022-06-24 16:17:39
cloudlinux
cloudlinux
Fixed CVE-2018-25032 in zlib
2022-05-16 13:03:51
Fixed CVE-2018-25032 in rsync
2022-05-19 23:55:35
nvd
nvd
CVE-2018-25032
2022-03-25 09:15:08
almalinux
almalinux
Important: mingw-zlib security update
2022-11-08 00:00:00
Important: rsync security update
2022-05-11 13:23:26
Important: mingw-zlib security update
2022-11-15 00:00:00
owncloud
owncloud
Security updates in Desktop Client - ownCloud
2022-05-23 00:00:00
cgr
cgr
CVE-2018-25032 vulnerabilities
2024-05-19 03:07:16
freebsd
freebsd
FreeBSD -- zlib compression out-of-bounds write
2022-04-06 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:08.zlib
2022-04-06 00:00:00
archlinux
archlinux
[ASA-202204-3] zlib: arbitrary code execution
2022-04-04 00:00:00
github
github
Out-of-bounds Write in zlib affects Nokogiri
2022-04-11 21:21:28
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
2022-03-26 00:00:33
prion
prion
Memory corruption
2022-03-25 09:15:00
rocky
rocky
zlib security update
2022-04-28 14:07:14
rsync security update
2022-05-11 13:23:26
qt
qt
Security advisory: Recently reported zlib compression issue impacts Qt
2022-04-05 00:00:00
amazon
amazon
Important: zlib
2022-04-04 23:23:00
Important: rsync
2022-12-01 17:33:00
debiancve
debiancve
CVE-2018-25032
2022-03-25 09:15:08
cloudfoundry
cloudfoundry
USN-5359-1: rsync vulnerability | Cloud Foundry
2022-05-23 00:00:00
USN-5355-1: zlib vulnerability | Cloud Foundry
2022-05-23 00:00:00
rubygems
rubygems
Out-of-bounds Write in zlib affects Nokogiri
2022-04-10 21:00:00
aix
aix
AIX is vulnerable to denial of service due to zlib and zlibNX
2022-09-28 13:38:50
cve
cve
CVE-2018-25032
2022-03-25 09:15:08
wolfi
wolfi
CVE-2018-25032 vulnerabilities
2024-09-30 03:53:08
mariadbunix
mariadbunix
CVE-2018-25032
2022-03-25 09:15:08
mageia
mageia
Updated zlib packages fix security vulnerability
2022-03-31 22:55:37
redos
redos
ROS-20220329-01
2022-03-29 00:00:00
broadcom
broadcom
Zlib memory corruption when deflating (i.e. when compressing)
2023-08-01 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.4
Confidence
High
EPSS
0.003
Percentile
68.4%
Related for ALPINE:CVE-2018-25032