CVE-2018-25032

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-25032
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-25032.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-25032
Aliases
Downstream
Related
Published
2022-03-25T09:15:08.187Z
Modified
2026-06-26T04:04:30.073088961Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "10.15"
                },
                {
                    "fixed": "10.15.7"
                }
            ],
            "vendor_product": "apple:mac_os_x"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "11.0"
                },
                {
                    "fixed": "11.6.6"
                },
                {
                    "introduced": "12.0.0"
                },
                {
                    "fixed": "12.4"
                }
            ],
            "vendor_product": "apple:macos"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:a:goto:gotoassist:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "11.9.18"
                }
            ],
            "vendor_product": "goto:gotoassist"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "10.7.0"
                },
                {
                    "fixed": "10.7.5"
                }
            ],
            "vendor_product": "mariadb:mariadb"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "11.0.0"
                },
                {
                    "last_affected": "11.70.2"
                }
            ],
            "vendor_product": "netapp:e-series_santricity_os_controller"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:o:siemens:scalance_sc622-2c_firmware:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "3.0"
                }
            ],
            "vendor_product": "siemens:scalance_sc622-2c_firmware"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:o:siemens:scalance_sc626-2c_firmware:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "3.0"
                }
            ],
            "vendor_product": "siemens:scalance_sc626-2c_firmware"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:o:siemens:scalance_sc632-2c_firmware:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "3.0"
                }
            ],
            "vendor_product": "siemens:scalance_sc632-2c_firmware"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:o:siemens:scalance_sc636-2c_firmware:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "3.0"
                }
            ],
            "vendor_product": "siemens:scalance_sc636-2c_firmware"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:o:siemens:scalance_sc642-2c_firmware:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "3.0"
                }
            ],
            "vendor_product": "siemens:scalance_sc642-2c_firmware"
        },
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:o:siemens:scalance_sc646-2c_firmware:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "3.0"
                }
            ],
            "vendor_product": "siemens:scalance_sc646-2c_firmware"
        },
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:*:*:*:*:*:*",
                "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "10.15.7-NA"
                },
                {
                    "last_affected": "10.15.7-security_update_2020"
                },
                {
                    "last_affected": "10.15.7-security_update_2020\\-001"
                },
                {
                    "last_affected": "10.15.7-security_update_2020\\-005"
                },
                {
                    "last_affected": "10.15.7-security_update_2020\\-007"
                },
                {
                    "last_affected": "10.15.7-security_update_2021\\-001"
                },
                {
                    "last_affected": "10.15.7-security_update_2021\\-002"
                },
                {
                    "last_affected": "10.15.7-security_update_2021\\-003"
                },
                {
                    "last_affected": "10.15.7-security_update_2021\\-006"
                },
                {
                    "last_affected": "10.15.7-security_update_2021\\-007"
                },
                {
                    "last_affected": "10.15.7-security_update_2021\\-008"
                },
                {
                    "last_affected": "10.15.7-security_update_2022\\-001"
                },
                {
                    "last_affected": "10.15.7-security_update_2022\\-002"
                },
                {
                    "last_affected": "10.15.7-security_update_2022\\-003"
                }
            ],
            "vendor_product": "apple:mac_os_x"
        },
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:azul:zulu:11.54:*:*:*:*:*:*:*",
                "cpe:2.3:a:azul:zulu:13.46:*:*:*:*:*:*:*",
                "cpe:2.3:a:azul:zulu:15.38:*:*:*:*:*:*:*",
                "cpe:2.3:a:azul:zulu:17.32:*:*:*:*:*:*:*",
                "cpe:2.3:a:azul:zulu:6.45:*:*:*:*:*:*:*",
                "cpe:2.3:a:azul:zulu:7.52:*:*:*:*:*:*:*",
                "cpe:2.3:a:azul:zulu:8.60:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "6.45"
                },
                {
                    "last_affected": "7.52"
                },
                {
                    "last_affected": "8.60"
                },
                {
                    "last_affected": "11.54"
                },
                {
                    "last_affected": "13.46"
                },
                {
                    "last_affected": "15.38"
                },
                {
                    "last_affected": "17.32"
                }
            ],
            "vendor_product": "azul:zulu"
        },
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "9.0"
                },
                {
                    "last_affected": "10.0"
                },
                {
                    "last_affected": "11.0"
                }
            ],
            "vendor_product": "debian:debian_linux"
        },
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "34"
                },
                {
                    "last_affected": "35"
                },
                {
                    "last_affected": "36"
                }
            ],
            "vendor_product": "fedoraproject:fedora"
        }
    ]
}
References

Affected packages

Git
github.com/madler/zlib

Affected ranges

Type
GIT
Repo
https://github.com/madler/zlib
Events
Introduced
0484693e1723bbab791c56f95597bd7dbe867d03
Fixed
21767c654d31d2dccdde4330529775c6c5fd5389
Fixed
5c44459c3b28a9bd3283aaceab7c615f8020c531
Database specific 
{
    "cpe": "cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.2.2.2"
        },
        {
            "fixed": "1.2.12"
        }
    ]
}

Affected versions

v1.*
v1.2.10
v1.2.11
v1.2.2.2
v1.2.2.3
v1.2.2.4
v1.2.3
v1.2.3.1
v1.2.3.2
v1.2.3.3
v1.2.3.4
v1.2.3.5
v1.2.3.6
v1.2.3.7
v1.2.3.8
v1.2.3.9
v1.2.4
v1.2.4-pre1
v1.2.4-pre2
v1.2.4.1
v1.2.4.2
v1.2.4.3
v1.2.4.4
v1.2.4.5
v1.2.5
v1.2.5.1
v1.2.5.2
v1.2.5.3
v1.2.6
v1.2.6.1
v1.2.7
v1.2.7.1
v1.2.7.2
v1.2.7.3
v1.2.8
v1.2.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-25032.json"
github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
20ae591abd0bfe1bfaee546989ee163f4ef832b1
Fixed
faddcf3c395da640b760c3f701f5bc1f3baae6c4
Introduced
c761b43451d54eeeecdf3c102906fcce88d4e9d9
Fixed
65e8506ca9d03967191b6ed207cf107d311f7f99
Introduced
7c7f9bef28aa566557da31402142f6dd8298ddd2
Fixed
1ac0bce36e5bf2136cedb1ce1da949f53cce4404
Introduced
1a647b700f6b72dc97211510a5d0c647d5d3d911
Fixed
b8f6d315fe4fe62ef73f6fb4f45e004fcedec20c
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
98d7ac1fbe2d61c0d21e2c22808ef808f29c0827
Fixed
6ffbc0e510cdaafe0494acd04e48d1f44727e86a
Fixed
10ed52767d25f3f9b9f5eee4983a3dee612ed2c6
Database specific 
{
    "cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "10.3.0"
        },
        {
            "fixed": "10.3.36"
        },
        {
            "introduced": "10.4.0"
        },
        {
            "fixed": "10.4.26"
        },
        {
            "introduced": "10.5.0"
        },
        {
            "fixed": "10.5.17"
        },
        {
            "introduced": "10.6.0"
        },
        {
            "fixed": "10.6.9"
        },
        {
            "introduced": "10.7.0"
        },
        {
            "fixed": "10.7.5"
        },
        {
            "introduced": "10.8.0"
        },
        {
            "fixed": "10.8.4"
        },
        {
            "introduced": "10.9.0"
        },
        {
            "fixed": "10.9.2"
        }
    ]
}

Affected versions

mariadb-10.*
mariadb-10.3.0
mariadb-10.3.1
mariadb-10.3.10
mariadb-10.3.12
mariadb-10.3.16
mariadb-10.3.17
mariadb-10.3.18
mariadb-10.3.19
mariadb-10.3.2
mariadb-10.3.20
mariadb-10.3.21
mariadb-10.3.26
mariadb-10.3.30
mariadb-10.3.31
mariadb-10.3.33
mariadb-10.3.35
mariadb-10.3.4
mariadb-10.3.5
mariadb-10.3.6
mariadb-10.3.7
mariadb-10.4.10
mariadb-10.4.11
mariadb-10.4.20
mariadb-10.4.21
mariadb-10.4.22
mariadb-10.4.23
mariadb-10.4.25
mariadb-10.4.3
mariadb-10.4.4
mariadb-10.4.5
mariadb-10.4.7
mariadb-10.4.9
mariadb-10.5.0
mariadb-10.5.11
mariadb-10.5.12
mariadb-10.5.13
mariadb-10.5.14
mariadb-10.5.16
mariadb-10.5.2
mariadb-10.5.4
mariadb-10.6.0
mariadb-10.6.1
mariadb-10.6.2
mariadb-10.6.3
mariadb-10.6.4
mariadb-10.6.5
mariadb-10.6.6
mariadb-10.6.8
mariadb-10.7.1
mariadb-10.7.2
mariadb-10.7.4
mariadb-10.8.1
mariadb-10.8.3
mariadb-10.9.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-25032.json"
github.com/python/cpython

Affected ranges

Type
GIT
Repo
https://github.com/python/cpython
Events
Introduced
1bf9cc509326bc42cd8cb1650eb9bf64550d817e
Fixed
e1ebdc52b8bd82a928398b0a75149552a723389a
Introduced
fa919fdf2583bdfead1df00e842f24f30b2a34bf
Fixed
f43e7678a1443b2583fc9bfba091b8ca7e38f075
Introduced
9cf6752276e6fcfd0c23fdb064ad27f448aaaf75
Fixed
6de2ca5339a83edb957e5a657ee6d6183cb3914c
Introduced
b494f5935c92951e75597bfe1c8b1f3112fec270
Fixed
f37715396786fd4055f5891aa16774ede26392ff
Database specific 
{
    "cpe": "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "3.7.0"
        },
        {
            "fixed": "3.7.14"
        },
        {
            "introduced": "3.8.0"
        },
        {
            "fixed": "3.8.14"
        },
        {
            "introduced": "3.9.0"
        },
        {
            "fixed": "3.9.13"
        },
        {
            "introduced": "3.10.0"
        },
        {
            "fixed": "3.10.5"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-25032.json"
github.com/sparklemotion/nokogiri

Affected ranges

Type
GIT
Repo
https://github.com/sparklemotion/nokogiri
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4e2c4b2571dc58af294f61e6fd923f0d1698c036
Database specific 
{
    "cpe": "cpe:2.3:a:nokogiri:nokogiri:*:*:*:*:*:ruby:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.13.4"
        }
    ]
}

Affected versions

1.*
1.7.0.1-linux-binary1
REL_1.*
REL_1.0.0
REL_1.0.1
REL_1.0.2
REL_1.0.3
REL_1.0.4
REL_1.0.5
REL_1.0.6
REL_1.0.7
REL_1.5.0.beta.1
REL_1.5.0.beta.2
v1.*
v1.10.0
v1.10.0.rc1
v1.10.1
v1.10.2
v1.10.3
v1.11.0
v1.11.0.rc1
v1.11.0.rc2
v1.11.0.rc3
v1.11.0.rc4
v1.11.1
v1.11.2
v1.11.3
v1.12.0
v1.12.0.rc1
v1.12.1
v1.12.2
v1.12.3
v1.13.0
v1.13.1
v1.13.2
v1.13.3
v1.5.0
v1.5.0.beta.3
v1.5.0.beta.4
v1.5.1
v1.5.1.rc1
v1.5.2
v1.5.3
v1.5.3.rc1
v1.5.3.rc3
v1.5.3.rc4
v1.5.3.rc5
v1.5.3.rc6
v1.5.4.rc1
v1.5.4.rc2
v1.5.4.rc3
v1.5.5.rc1
v1.5.5.rc2
v1.5.6
v1.5.6.rc2
v1.5.7
v1.5.7.rc1
v1.5.7.rc2
v1.5.7.rc3
v1.5.8
v1.5.9
v1.6.0
v1.6.0.rc1
v1.6.2
v1.6.2.1
v1.6.2.beta.1
v1.6.2.rc1
v1.6.2.rc3
v1.6.3
v1.6.3.1
v1.6.3.rc1
v1.6.3.rc2
v1.6.3.rc3
v1.6.4
v1.6.5
v1.6.6
v1.6.6.1
v1.6.6.2
v1.6.7.rc1
v1.6.7.rc2
v1.6.7.rc3
v1.6.7.rc4
v1.6.8
v1.6.8.rc1
v1.6.8.rc2
v1.6.8.rc3
v1.7.0
v1.7.0.1
v1.8.0
v1.8.1
v1.8.2
v1.8.3
v1.8.4
v1.8.5
v1.9.0
v1.9.0.rc1
v1.9.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-25032.json"