PT-2022-2042 · Zlib+16 · Zlib+16
Published
2018-04-20
·
Updated
2026-03-13
·
CVE-2018-25032
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
zlib versions 1.2.11 through 1.2.12
Description
The issue is related to memory corruption when deflating, i.e., when compressing, if the input has many distant matches. This can lead to a buffer overflow in memory. An attacker could potentially exploit this issue by sending specially crafted data to an application, resulting in a denial of service or possibly more severe consequences, although the full extent of the potential impact has not been studied. The vulnerability can be exploited by an attacker with network access via multiple protocols.
Recommendations
For zlib versions 1.2.11 through 1.2.12, update to release 1.2.12 or later for additional bug fixes. As a temporary workaround, consider restricting the input to the deflation function to prevent memory corruption until a patch is available.
Exploit
Fix
DoS
Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Freebsd
Ibm Aix
Linuxmint
Apple Macos
Mariadb Server
Mysql Server
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Zlib