Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib 1.2.11 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-25032US | high7.5 | Exploit | ||
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. | ||||
02
references
External citations — patches, advisories, analysis.
- http://seclists.org/fulldisclosure/2022/May/33WEB
- http://seclists.org/fulldisclosure/2022/May/35WEB
- http://seclists.org/fulldisclosure/2022/May/38WEB
- http://www.openwall.com/lists/oss-security/2022/03/25/2WEB
- http://www.openwall.com/lists/oss-security/2022/03/26/1WEB
- https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdfWEB
- https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531WEB
- https://github.com/madler/zlib/compare/v1.2.11...v1.2.12WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan