CVE-2018-25032

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-25032.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-25032
Aliases
Downstream
Related
Published
2022-03-25T09:15:08Z
Modified
2025-11-02T12:27:06.902536Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

References

Affected packages

Git

github.com/mariadb-corporation/mariadb-connector-nodejs

Affected ranges

Type
GIT
Repo
https://github.com/mariadb-corporation/mariadb-connector-nodejs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d6863347edda2f07f646eec5c0be251d4b599025

Affected versions

0.*

0.7.0

2.*

2.0.0-alpha
2.0.1-beta
2.0.2-rc
2.0.3
2.0.4
2.0.5
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.2.0
2.3.0
2.3.1
2.4.0
2.4.1
2.4.2
2.5.0
2.5.1
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6

3.*

3.0.0
3.0.0-rc

github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
20ae591abd0bfe1bfaee546989ee163f4ef832b1
Fixed
faddcf3c395da640b760c3f701f5bc1f3baae6c4

Affected versions

mariadb-10.*

mariadb-10.0.31
mariadb-10.0.32
mariadb-10.0.33
mariadb-10.0.34
mariadb-10.0.35
mariadb-10.0.36
mariadb-10.0.37
mariadb-10.0.38
mariadb-10.1.23
mariadb-10.1.24
mariadb-10.1.25
mariadb-10.1.26
mariadb-10.1.27
mariadb-10.1.28
mariadb-10.1.29
mariadb-10.1.30
mariadb-10.1.31
mariadb-10.1.32
mariadb-10.1.33
mariadb-10.1.34
mariadb-10.1.35
mariadb-10.1.36
mariadb-10.1.37
mariadb-10.1.38
mariadb-10.1.39
mariadb-10.1.40
mariadb-10.1.41
mariadb-10.1.42
mariadb-10.1.43
mariadb-10.1.44
mariadb-10.1.45
mariadb-10.1.46
mariadb-10.1.47
mariadb-10.2.10
mariadb-10.2.11
mariadb-10.2.12
mariadb-10.2.13
mariadb-10.2.14
mariadb-10.2.15
mariadb-10.2.16
mariadb-10.2.17
mariadb-10.2.18
mariadb-10.2.19
mariadb-10.2.20
mariadb-10.2.21
mariadb-10.2.22
mariadb-10.2.23
mariadb-10.2.24
mariadb-10.2.25
mariadb-10.2.26
mariadb-10.2.27
mariadb-10.2.28
mariadb-10.2.29
mariadb-10.2.30
mariadb-10.2.31
mariadb-10.2.32
mariadb-10.2.33
mariadb-10.2.34
mariadb-10.2.35
mariadb-10.2.36
mariadb-10.2.37
mariadb-10.2.38
mariadb-10.2.39
mariadb-10.2.40
mariadb-10.2.41
mariadb-10.2.42
mariadb-10.2.43
mariadb-10.2.6
mariadb-10.2.7
mariadb-10.2.8
mariadb-10.2.9
mariadb-10.3.0
mariadb-10.3.1
mariadb-10.3.10
mariadb-10.3.11
mariadb-10.3.12
mariadb-10.3.13
mariadb-10.3.14
mariadb-10.3.15
mariadb-10.3.16
mariadb-10.3.17
mariadb-10.3.18
mariadb-10.3.19
mariadb-10.3.2
mariadb-10.3.20
mariadb-10.3.21
mariadb-10.3.22
mariadb-10.3.23
mariadb-10.3.24
mariadb-10.3.25
mariadb-10.3.26
mariadb-10.3.27
mariadb-10.3.28
mariadb-10.3.29
mariadb-10.3.3
mariadb-10.3.30
mariadb-10.3.31
mariadb-10.3.32
mariadb-10.3.33
mariadb-10.3.34
mariadb-10.3.35
mariadb-10.3.4
mariadb-10.3.5
mariadb-10.3.6
mariadb-10.3.7
mariadb-10.3.8
mariadb-10.3.9

mariadb-5.*

mariadb-5.5.55
mariadb-5.5.56
mariadb-5.5.57
mariadb-5.5.58
mariadb-5.5.59
mariadb-5.5.60
mariadb-5.5.61
mariadb-5.5.62
mariadb-5.5.63
mariadb-5.5.64
mariadb-5.5.65
mariadb-5.5.66
mariadb-5.5.67
mariadb-5.5.68

mariadb-galera-10.*

mariadb-galera-10.0.30
mariadb-galera-10.0.31
mariadb-galera-10.0.32
mariadb-galera-10.0.33
mariadb-galera-10.0.34
mariadb-galera-10.0.35
mariadb-galera-10.0.36
mariadb-galera-10.0.37

mariadb-galera-5.*

mariadb-galera-5.5.52
mariadb-galera-5.5.53
mariadb-galera-5.5.54
mariadb-galera-5.5.55
mariadb-galera-5.5.56
mariadb-galera-5.5.57
mariadb-galera-5.5.58
mariadb-galera-5.5.59
mariadb-galera-5.5.60
mariadb-galera-5.5.61
mariadb-galera-5.5.62

mysql-5.*

mysql-5.5.55
mysql-5.5.56
mysql-5.5.57
mysql-5.5.58
mysql-5.5.59
mysql-5.5.60
mysql-5.5.61
mysql-5.5.62

Database specific

vanir_signatures

[
    {
        "id": "CVE-2018-25032-bab28f5d",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "sql/strfunc.cc",
            "function": "find_set"
        },
        "digest": {
            "function_hash": "96567548985656349046472553596954460768",
            "length": 1094.0
        },
        "source": "https://github.com/mariadb/server/commit/faddcf3c395da640b760c3f701f5bc1f3baae6c4"
    },
    {
        "id": "CVE-2018-25032-ee10862f",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "sql/strfunc.cc"
        },
        "digest": {
            "line_hashes": [
                "271363707396860767418283350345897486504",
                "120596951573328682502907908502941671745",
                "115421961338400510566446524145876737974",
                "64074615696916198601226435566349591945"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/mariadb/server/commit/faddcf3c395da640b760c3f701f5bc1f3baae6c4"
    }
]

github.com/python/cpython

Affected ranges

Type
GIT
Repo
https://github.com/python/cpython
Events
Introduced
1bf9cc509326bc42cd8cb1650eb9bf64550d817e
Fixed
e1ebdc52b8bd82a928398b0a75149552a723389a

github.com/sparklemotion/nokogiri

Affected ranges

Type
GIT
Repo
https://github.com/sparklemotion/nokogiri
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4e2c4b2571dc58af294f61e6fd923f0d1698c036

Affected versions

1.*

1.7.0.1-linux-binary1

REL_1.*

REL_1.0.0
REL_1.0.1
REL_1.0.2
REL_1.0.3
REL_1.0.4
REL_1.0.5
REL_1.0.6
REL_1.0.7
REL_1.1.0
REL_1.1.1
REL_1.2.0
REL_1.2.1
REL_1.2.2
REL_1.2.3
REL_1.3.0
REL_1.3.0rc1
REL_1.3.1
REL_1.3.2
REL_1.3.3
REL_1.4.0
REL_1.4.1
REL_1.4.2
REL_1.4.3
REL_1.4.3.1
REL_1.5.0.beta.1
REL_1.5.0.beta.2

v1.*

v1.10.0
v1.10.0.rc1
v1.10.1
v1.10.2
v1.10.3
v1.11.0
v1.11.0.rc1
v1.11.0.rc2
v1.11.0.rc3
v1.11.0.rc4
v1.11.1
v1.11.2
v1.11.3
v1.12.0
v1.12.0.rc1
v1.12.1
v1.12.2
v1.12.3
v1.13.0
v1.13.1
v1.13.2
v1.13.3
v1.4.4
v1.4.4.1
v1.4.4.2
v1.5.0
v1.5.0.beta.3
v1.5.0.beta.4
v1.5.1
v1.5.1.rc1
v1.5.2
v1.5.3
v1.5.3.rc1
v1.5.3.rc3
v1.5.3.rc4
v1.5.3.rc5
v1.5.3.rc6
v1.5.4
v1.5.4.rc1
v1.5.4.rc2
v1.5.4.rc3
v1.5.5
v1.5.5.rc1
v1.5.5.rc2
v1.5.5.rc3
v1.5.6
v1.5.6.rc1
v1.5.6.rc2
v1.5.7
v1.5.7.rc1
v1.5.7.rc2
v1.5.7.rc3
v1.5.8
v1.5.9
v1.6.0
v1.6.0.rc1
v1.6.2
v1.6.2.1
v1.6.2.beta.1
v1.6.2.rc1
v1.6.2.rc2
v1.6.2.rc3
v1.6.3
v1.6.3.1
v1.6.3.rc1
v1.6.3.rc2
v1.6.3.rc3
v1.6.4
v1.6.5
v1.6.6
v1.6.6.1
v1.6.6.2
v1.6.7.rc1
v1.6.7.rc2
v1.6.7.rc3
v1.6.7.rc4
v1.6.8
v1.6.8.rc1
v1.6.8.rc2
v1.6.8.rc3
v1.7.0
v1.7.0.1
v1.8.0
v1.8.1
v1.8.2
v1.8.3
v1.8.4
v1.8.5
v1.9.0
v1.9.0.rc1
v1.9.1

github.com/madler/zlib

Affected ranges

Type
GIT
Repo
https://github.com/madler/zlib
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5c44459c3b28a9bd3283aaceab7c615f8020c531

Affected versions

v0.*

v0.71
v0.79
v0.8
v0.9
v0.91
v0.92
v0.93
v0.94
v0.95
v0.99

v1.*

v1.0-pre
v1.0.1
v1.0.2
v1.0.4
v1.0.5
v1.0.7
v1.0.8
v1.0.9
v1.1.0
v1.1.1
v1.1.2
v1.1.3
v1.1.4
v1.2.0
v1.2.0.1
v1.2.0.2
v1.2.0.3
v1.2.0.4
v1.2.0.5
v1.2.0.6
v1.2.0.7
v1.2.0.8
v1.2.1
v1.2.1.1
v1.2.1.2
v1.2.10
v1.2.11
v1.2.2
v1.2.2.1
v1.2.2.2
v1.2.2.3
v1.2.2.4
v1.2.3
v1.2.3.1
v1.2.3.2
v1.2.3.3
v1.2.3.4
v1.2.3.5
v1.2.3.6
v1.2.3.7
v1.2.3.8
v1.2.3.9
v1.2.4
v1.2.4-pre1
v1.2.4-pre2
v1.2.4.1
v1.2.4.2
v1.2.4.3
v1.2.4.4
v1.2.4.5
v1.2.5
v1.2.5.1
v1.2.5.2
v1.2.5.3
v1.2.6
v1.2.6.1
v1.2.7
v1.2.7.1
v1.2.7.2
v1.2.7.3
v1.2.8
v1.2.9

Database specific

vanir_signatures

[
    {
        "id": "CVE-2018-25032-0fc51149",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "deflate.h"
        },
        "digest": {
            "line_hashes": [
                "141723864317747925058336557003436481538",
                "67358590013236664675391494614848539802",
                "302908053743602711134143963280417879769",
                "63246384868305385028609490170472494591",
                "197696826748605258549566037975095074473",
                "178728171548848499097530913039572405075",
                "239441329185959104795351783318844433913",
                "113880934804577714788433535757505248367",
                "186776389272425000966978050927088826772",
                "230224791616736251459435186768860733470",
                "315011761030768229289512186357498758174",
                "7512418680227091364171781841596870314",
                "337472628272406866696043769040470883323",
                "179952937507251961654454387812217343994",
                "52432553690372258283590198874603137476",
                "48216828784747377600525248297419610319",
                "167386283172557197139527567126230857405",
                "52989523748966647699789142542497781711",
                "104284105052473956938937706929463953108",
                "61514555653805824093844711119884087722",
                "261275755014155220492152028762043809052",
                "223152562692181219827932737786788727815",
                "251997642670575075602858006756589800988",
                "263015191860464613075683134237649416842"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531"
    },
    {
        "id": "CVE-2018-25032-561ef634",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "deflate.c"
        },
        "digest": {
            "line_hashes": [
                "95527534056965999805195222966911308931",
                "40377084281797978781809953378357646014",
                "169925438748705490661276078601557135147",
                "263420814224869622578870971980400825129",
                "55947360462560040236426082660137443332",
                "278112257920924414324335574811393650708",
                "21474087875977361105189073914296703668",
                "213530804123451704796055807666465775624",
                "128861107472703546063652180908920042922",
                "320638403681128379778124806992206626438",
                "164212191260478141579821974251646259037",
                "158218631382871507579401750610032717544",
                "208663743624237816202707950212939183677",
                "319931111585565094142139107543831628965",
                "304585962814257033681920331726959626340",
                "288091319656971273051039017292829193524",
                "314181257043960388891286509408608660270",
                "281348945158634912779652987617921208801",
                "251371988921103670719178198170621178148",
                "89228518188905023274567953372492642384",
                "11154538915074374363518656421808658793",
                "138692121015815931217353122397344876623",
                "331635599745367811337070131292552797279",
                "140300391123739811445147671784482577305",
                "296162210247165598639726066625577764646",
                "202179798597446626580721641273616384631",
                "227213397709513200874059200915662776630",
                "98431677271186169320922500200198031189",
                "32929428429162941793112522035732042956",
                "186318132831561585867179212354734263910",
                "147675632396734393261281517662783924275",
                "30425654285744897008841363475340594789",
                "264248193964434628768022975059497886822",
                "157856874409156161731194607198107812714",
                "7477895630416423579748747537469175639",
                "287319464347230740037567272479812888874",
                "124040230490321498039465106068895104028",
                "157856874409156161731194607198107812714",
                "7477895630416423579748747537469175639",
                "287319464347230740037567272479812888874",
                "124040230490321498039465106068895104028",
                "157856874409156161731194607198107812714",
                "7477895630416423579748747537469175639",
                "287319464347230740037567272479812888874",
                "124040230490321498039465106068895104028",
                "157856874409156161731194607198107812714",
                "7477895630416423579748747537469175639",
                "287319464347230740037567272479812888874",
                "124040230490321498039465106068895104028"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531"
    },
    {
        "id": "CVE-2018-25032-6531a8a2",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "deflate.h",
            "function": "_tr_tally_dist"
        },
        "digest": {
            "function_hash": "183577064079204038223351938506323241649",
            "length": 405.0
        },
        "source": "https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531"
    },
    {
        "id": "CVE-2018-25032-b8d1705b",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "deflate.h",
            "function": "_tr_tally_lit"
        },
        "digest": {
            "function_hash": "197602208888546417884389429356439392046",
            "length": 258.0
        },
        "source": "https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531"
    },
    {
        "id": "CVE-2018-25032-eaa7586e",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "trees.c"
        },
        "digest": {
            "line_hashes": [
                "275729980329486640864871635647500674241",
                "36310519418943524490990280449166385695",
                "83093560647248392120903241051961354577",
                "15559684812814601637683710660364447171",
                "124457097401623797224694666739951043404",
                "170040189433616466552056819666133826240",
                "37728164962488204105515535869221895289",
                "318974904746630559889012130340606527190",
                "203420035528872593117691111285885472961",
                "281432424335107080520185873839181488805",
                "263446684365866307309878265978833443492",
                "180904249670093724273103375739725429001",
                "157392680355378625847726856020041717172",
                "98431604612329735115473080898565296646",
                "104463810397730140048307147091942102116",
                "695108473130459805652151375261153836",
                "260256238173438554145983822103816123323",
                "55563018243523296312660524556172760836",
                "54521747130159132355809839883599176076",
                "284183267864467478325414241930994380573",
                "317226498807644787217983491378508508945",
                "294461928729349457650093699995822630553",
                "23843344622014854395634360508374769167",
                "181349001937904947627317717850091119788",
                "247642861271588735194604471829776102269",
                "241241107559885235631428206071269883582",
                "71389195349489551025665626279939797786",
                "305697195570412995838641631157082682039",
                "271659869836972134851981129039061253853",
                "114017433329083463939489002363684398859",
                "243284635003099158607636791722620798624",
                "254090499493632955889431416931979758708",
                "280994057955809864110825216049260260568",
                "189542929523420146747088537002250990400",
                "264830883514038256125886789433363475321",
                "208672719471545000741289466095903292417",
                "81191180630014765923302463762403452970",
                "289565422209295032945524427625623770663",
                "228817909144996188778908253764289710103",
                "324270781134441179326963692477977264994",
                "228478318158434263888083744272467519845",
                "314337177623198088727946449990923729069",
                "306782173303871066853395012939350031227",
                "236509791217529222740138786750656921902",
                "150138996121765241686509325879686315727",
                "144184067178449835701555955902902643889",
                "95046897030385651463719084436879453213",
                "234560781543869297759876207381494709077"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531"
    }
]