Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib 1.2.11 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-25032US | high7.5 | Exploit | ||
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://seclists.org/fulldisclosure/2022/May/33WEB
- http://seclists.org/fulldisclosure/2022/May/35WEB
- http://seclists.org/fulldisclosure/2022/May/38WEB
- http://www.openwall.com/lists/oss-security/2022/03/25/2WEB
- http://www.openwall.com/lists/oss-security/2022/03/26/1WEB
- https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdfWEB
- https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531WEB
- https://github.com/madler/zlib/compare/v1.2.11...v1.2.12WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan