CLSA-2022-1652706098 Fixed CVE-2018-25032 in zlib

CVE-2018-25032: Fix memory corruption when deflating if the input has many distant matches...

Ubuntu 18.04 LTS / 20.04 LTS : zlib vulnerability (USN-5355-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5355-1 advisory. Danilo Ramos discovered that zlib incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause...

Ubuntu 16.04 ESM : zlib vulnerability (USN-5355-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5355-2 advisory. USN-5355-1 fixed a vulnerability in zlib. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...

USN-5355-2 zlib vulnerability

USN-5355-1 fixed a vulnerability in zlib. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Danilo Ramos discovered that zlib incorrectly handled memory when performing certain deflating operations. An attacker could use this issue...

USN-5355-1 zlib vulnerability

Danilo Ramos discovered that zlib incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code...

Vulnerability fixed in zlib

A vulnerability has been fixed in Zlib. The vulnerability allows a malicious person potentially able to corrupt memory during compression of specially prepared data. As a result of this, the malicious party could establish a denial-of-service effect a Denial-of-Service in the application using...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via memory corruption when deflating i.e., when compressing if the input has many distant matches. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its...

AZL-26135 CVE-2018-25032 affecting package boost for versions less than 1.76.0-3

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

AZL-43678 CVE-2018-25032 affecting package gpsbabel 1.8.0-4

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

DEBIAN-CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

ALPINE-CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

AZL-45231 CVE-2018-25032 affecting package fltk 1.3.8-1

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

AZL-9143 CVE-2018-25032 affecting package zlib for versions less than 1.2.12-1

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

The vulnerability of the zlib compression library in the “Avora” operating system allows a hacker to cause a service failure or have an unpredictable impact.

The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...

The vulnerability of the zlib compression library in the “Avora” operating system, related to integer overflows, allows attackers to cause service failures or have unpredictable effects.

The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...

USN-4246-1 zlib vulnerabilities

It was discovered that zlib incorrectly handled pointer arithmetic. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-9840, CVE-2016-9841 It was discovered that zlib incorrectly handled vectors involving left...

Security Bulletin: Vulnerabilities in libxml2 and zlib affect IBM RackSwitch Products

Summary IBM RackSwitch Products listed below have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details Summary IBM RackSwitch Products listed below have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details: CVEID: CVE-2016-4658...

Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience

Summary The IBM Tealeaf Consumer Experience portal exposes some of its operational state that could be accidentally captured and exposed by network infrastructure components. Vulnerability in IBM Tealeaf Customer Experience can cause host header injection attack that could lead to HTTP cache...

PT-2022-2042

Name of the Vulnerable Software and Affected Versions zlib versions 1.2.11 through 1.2.12 Description The issue is related to memory corruption when deflating, i.e., when compressing, if the input has many distant matches. This can lead to a buffer overflow in memory. An attacker could potentiall...

zlib: Big-endian out-of-bounds pointer

The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation...