2605 matches found
Out-of-bounds Write
Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Out-of-bounds Write via the zlib dependency which allows memory corruption when deflating if the input has many distant matches. Remediation Upgrade nokogiri to version 1.13.4 or...
Important Photon OS Security Update - PHSA-2022-4.0-0171
Updates of 'vim', 'zlib', 'ImageMagick' packages of Photon OS have been released...
Out-of-bounds Write in zlib affects Nokogiri
Summary Nokogiri v1.13.4 updates the vendored zlib from 1.2.11 to 1.2.12, which addresses CVE-2018-25032. That CVE is scored as CVSS 7.4 "High" on the NVD record as of 2022-04-05. Please note that this advisory only applies to the CRuby implementation of Nokogiri = v1.13.4. Impact CVE-2018-25032 ...
Important Photon OS Security Update - PHSA-2022-0171
Updates of 'vim', 'zlib', 'ImageMagick' packages of Photon OS have been released...
Important: zlib
Issue Overview: An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating ex: when compressing if the input has many distant matches. For some rare inputs with a large number of distant matches crafted payloads, the buffer into which the compressed or deflated...
FreeBSD : FreeBSD -- zlib compression out-of-bounds write (38f2e3a0-b61e-11ec-9ebc-1c697aa5a594)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 38f2e3a0-b61e-11ec-9ebc-1c697aa5a594 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has ma...
Amazon Linux 2 : zlib (ALAS-2022-1772)
The version of zlib installed on the remote host is prior to 1.2.7-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1772 advisory. An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating ex: when compressing if the input has...
FreeBSD -- zlib compression out-of-bounds write
Problem Description: Certain inputs can cause zlib's compression routine to overwrite an internal buffer with compressed data. This issue may require the use of uncommon or non-default compression parameters. Impact: The out-of-bounds write may result in memory corruption and an application crash...
FreeBSD-SA-22:08.zlib
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:08.zlib Security Advisory The FreeBSD Project Topic: zlib compression out-of-bounds write Category: zlib Module: contrib Announced: 2022-04-06 Credits: Danil...
Security advisory: Recently reported zlib compression issue impacts Qt
zlib has recently reported that it has a security issue when deflating which could cause memory corruption if the input has many distant matches. This is reported in a bit more detail here: and has been assigned the CVE id CVE-2018-25032. This has been fixed in an update to zlib 1.2.12 This affec...
[ASA-202204-3] zlib: arbitrary code execution
Arch Linux Security Advisory ASA-202204-3 ========================================= Severity: High Date : 2022-04-04 CVE-ID : CVE-2018-25032 Package : zlib Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2657 Summary ======= The package zlib before version...
Debian DLA-2968-1 : zlib - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2968 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that Nessus has not tested fo...
Debian: Security Advisory (DLA-2968-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2968-1] zlib security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2968-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky April 02, 2022 https://wiki.debian.org/LTS -...
Debian: Security Advisory (DSA-5111-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-2968-1 zlib - security update
Bulletin has no description...
[SECURITY] [DSA 5111-1] zlib security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5111-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 01, 2022 https://www.debian.org/security/faq -...
SUSE-SU-2022:1062-1 Security update for zlib
This update for zlib fixes the following issues: - CVE-2018-25032: Fixed memory corruption on deflate bsc1197459...