NetSight
IP …
high7.5

CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Impact

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Affected products

VendorProductAffected versions
NokogiriNokogiri
before 1.13.4
PythonPython
from 3.7.0 before 3.7.14
from 3.8.0 before 3.8.14
from 3.9.0 before 3.9.13
from 3.10.0 before 3.10.5
ZlibZlib
from 1.2.2.2 before 1.2.12
DebianDebian Linux
Versions 9.0, 10.0, 11.0
FedoraprojectFedora
Versions 34, 35, 36
AppleMac Os X
from 10.15 before 10.15.7
Version 10.15.7
AppleMacos
from 11.0 before 11.6.6
from 12.0.0 before 12.4
MariadbMariadb
from 10.3.0 before 10.3.36
from 10.4.0 before 10.4.26
from 10.5.0 before 10.5.17
from 10.6.0 before 10.6.9
from 10.7.0 before 10.7.5
from 10.8.0 before 10.8.4
NetappActive Iq Unified Manager
All versions
NetappE-Series Santricity Os Controller
from 11.0.0 through 11.70.2
NetappManagement Services For Element Software
All versions
NetappOncommand Workflow Automation
All versions

Weakness classification

CWE-787

References