AZL-26156 CVE-2018-25032 affecting package nmap for versions less than 7.93-1

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

AZL-43678 CVE-2018-25032 affecting package gpsbabel 1.8.0-4

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

AZL-44919 CVE-2018-25032 affecting package gpsbabel 1.8.0-4

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

AZL-42715 CVE-2018-25032 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

AZL-44466 CVE-2018-25032 affecting package openjpeg2 2.3.1-12

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

AZL-45177 CVE-2018-25032 affecting package teckit for versions less than 2.5.12-4

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

AZL-43675 CVE-2018-25032 affecting package clucene 2.3.3.4-38

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

UBUNTU-CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

curl:curl_fuzzer: Heap-use-after-free in nghttp2_hd_deflate_hd_bufs

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6691284327202816 Project: curl Fuzzing Engine: honggfuzz Fuzz Target: curlfuzzer Job Type: honggfuzzasancurl Platform Id: linux Crash Type: Heap-use-after-free READ 3 Crash Address: 0x60d0000001e8 Crash...

CVE-2020-5933: Undefined Security Weakness

On versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, when a BIG-IP system that has a virtual server configured with an HTTP compression profile processes compressed HTTP message payloads that require deflation, a Slowloris-style attack can trigger a...