Lucene search
+L

682 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/27 1:51 p.m.•48 views

Security Bulletin: IBM App Connect Enterprise & IBM Integration Bus are vulnerable to a denial of service due to zlib (CVE-2018-25032)

Summary IBM App Connect Enterprise & IBM Integration Bus are vulnerable to a denial of service due to zlib. The fix includes zlib 1.2.12. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service, caused by a memory corruption in the deflate operation. By...

7.5CVSS7.8AI score0.51733EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/27 1:09 p.m.•57 views

Security Bulletin: IBM MQ is vulnerable to an issue within the Zlib library (CVE-2018-25032)

Summary An issue was identified within the Zlib library that affects IBM MQ. IBM MQ uses Zlib to perform message compression. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service, caused by a memory corruption in the deflate operation. By using many...

7.5CVSS7.8AI score0.51733EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/08 7:31 a.m.•52 views

Security Bulletin: A vulneraqbility in Zlib affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2018-25032)

Summary A vulneraqbility in Zlib affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent and IBM Tivoli Composite Application Manager for Transactions Web Response Time agent. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of...

7.5CVSS8AI score0.51733EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/06/24 4:17 p.m.•40 views

Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to denial of service due to zlib (CVE-2018-25032)

Summary There is a vulnerability in the zlib library used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable issue. Vulnerability Details CVEID: CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service,...

7.5CVSS0.5AI score0.51733EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2022/06/20 8:17 p.m.•14 views

MAL-2022-1522 Malicious code in bfx-facs-deflate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a83470951196db37449563f91202247324bc8368f0a415fcd31d45e31bf74342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:17 p.m.•6 views

Malicious code in bfx-facs-deflate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a83470951196db37449563f91202247324bc8368f0a415fcd31d45e31bf74342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/05/19 6:55 p.m.•18 views

CLSA-2022-1652986558 Fixed CVE-2018-25032 in rsync

CVE-2018-25032: Fix memory corruption when deflating if the input has many distant matches...

7.5CVSS5.8AI score0.51733EPSS
SaveExploits1References1
OSV
OSV
•added 2022/05/19 6:53 p.m.•11 views

CLSA-2022-1652986439 Fix CVE(s): CVE-2018-25032

SECURITY UPDATE: memory corruption when deflating - debian/patches/CVE-2018-25032-1.patch: fix a bug that can crash deflate on some input when using ZFIXED in deflate.c, deflate.h. - debian/patches/CVE-2018-25032-2.patch: assure that the number of bits for deflatePrime is valid in deflate.c. -...

7.5CVSS6.8AI score0.51733EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2022/04/26 5:15 p.m.•17 views

zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating ex: when compressing if the input has many distant matches. For some rare inputs with a large number of distant matches crafted payloads, the buffer into which the compressed or deflated data is written...

7.5CVSS6.9AI score0.51733EPSS
SaveExploits1References4
OSV
OSV
•added 2022/04/05 2:56 p.m.•17 views

CLSA-2022-1649170583 Fix CVE(s): CVE-2018-25032

SECURITY UPDATE: memory corruption when deflating - debian/patches/CVE-2018-25032-1.patch: fix a bug that can crash deflate on some input when using ZFIXED in deflate.c, deflate.h. - debian/patches/CVE-2018-25032-2.patch: assure that the number of bits for deflatePrime is valid in deflate.c. -...

7.5CVSS6.8AI score0.51733EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
•added 2022/03/31 7:00 a.m.•12 views

zlib before 1.2.12 allows memory corruption when deflating (i.e. when compressing) if the input has many distant matches.

...

7.5CVSS6.2AI score0.51733EPSS
SaveExploits1
OSV
OSV
•added 2022/03/25 9:15 a.m.•20 views

AZL-42759 CVE-2018-25032 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS6.7AI score0.51733EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/25 9:15 a.m.•4 views

DEBIAN-CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS6.7AI score0.51733EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/25 9:15 a.m.•12 views

AZL-43753 CVE-2018-25032 affecting package openjpeg2 2.3.1-12

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS6.7AI score0.51733EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/25 9:15 a.m.•8 views

ALPINE-CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS7.1AI score0.51733EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/25 12:00 a.m.•5 views

CVE-2018-25032: Out-of-bounds Write

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

7.5CVSS6AI score0.51733EPSS
SaveExploits1References60
OSV
OSV
•added 2021/08/25 8:59 p.m.•62 views

GHSA-GVCP-948F-8F2P Use of Uninitialized Resource in libp2p-deflate

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...

9.8CVSS9.4AI score0.0123EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2021/08/25 8:59 p.m.•38 views

Use of Uninitialized Resource in libp2p-deflate

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...

9.8CVSS9AI score0.0123EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/08/08 6:15 a.m.•12 views

CVE-2020-36443

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...

9.8CVSS6AI score0.0123EPSS
SaveExploits0References2
NVD
NVD
•added 2021/08/08 6:15 a.m.•45 views

CVE-2020-36443

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...

9.8CVSS0.0123EPSS
SaveExploits0References2
Rows per page
Query Builder