What’s Vulnerable › Vulnerabilities

CVE-2018-25032: Nokogiri affected by zlib's Out-of-bounds Write vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 51.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-03-25 · updated 2026-10-14
• Weakness: CWE-787

Description

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Affected products

• macOS: from 10.15 before 10.15.7; 10.15.7, 10.15.7-security_update_2020, 10.15.7-security_update_2020-001, 10.15.7-security_update_2020-005, 10.15.7-security_update_2020-007, 10.15.7-security_update_2021-001 (+8) — fixed in 10.15.7
• Apple macOS: from 11.0 before 11.6.6; from 12.0.0 before 12.4 — fixed in 11.6.6, 12.4
• Azul Zulu: 6.45, 7.52, 8.60, 11.54, 13.46, 15.38 (+1)
• Debian Linux: 9.0, 10.0, 11.0
• Fedoraproject Fedora: 34, 35, 36
• Gotoassist: before 11.9.18 — fixed in 11.9.18
• MariaDB: from 10.3.0 before 10.3.36; from 10.4.0 before 10.4.26; from 10.5.0 before 10.5.17; from 10.6.0 before 10.6.9; from 10.7.0 before 10.7.5; from 10.8.0 before 10.8.4 — fixed in 10.3.36, 10.4.26, 10.5.17, 10.6.9, 10.7.5, 10.8.4
• Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows: all versions
• E-Series SANtricity OS Controller Software 11.x: from 11.0.0 through 11.70.2
• NetApp H300S Firmware: all versions
• NetApp H410C Firmware: all versions
• NetApp H410S Firmware: all versions
• NetApp H500S Firmware: all versions
• NetApp H700S Firmware: all versions
• NetApp Hci Compute Node: all versions
• NetApp Management Services For Element Software: all versions
• NetApp OnCommand Workflow Automation: all versions
• NetApp ONTAP Select Deploy administration utility: all versions
• sparklemotion nokogiri: before 1.13.4 — fixed in 1.13.4
• Python: from 3.7.0 before 3.7.14; from 3.8.0 before 3.8.14; from 3.9.0 before 3.9.13; from 3.10.0 before 3.10.5 — fixed in 3.10.5, 3.7.14, 3.8.14, 3.9.13
• Siemens Scalance Sc622-2C Firmware: before 3.0 — fixed in 3.0
• Siemens Scalance Sc626-2C Firmware: before 3.0 — fixed in 3.0
• Siemens Scalance Sc632-2C Firmware: before 3.0 — fixed in 3.0
• Siemens Scalance Sc636-2C Firmware: before 3.0 — fixed in 3.0
• Siemens Scalance Sc642-2C Firmware: before 3.0 — fixed in 3.0
• Siemens Scalance Sc646-2C Firmware: before 3.0 — fixed in 3.0
• zlib: from 1.2.2.2 before 1.2.12 — fixed in 1.2.12
• Rubygems Nokogiri: before 1.13.4; 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+137) — fixed in 1.13.4

How to fix

Upgrade to a fixed version: macOS 10.15.7; Apple macOS 11.6.6, 12.4; Gotoassist 11.9.18; MariaDB 10.3.36, 10.4.26, 10.5.17, 10.6.9; sparklemotion nokogiri 1.13.4; Python 3.10.5, 3.7.14, 3.8.14, 3.9.13; Siemens Scalance Sc622-2C Firmware 3.0; Siemens Scalance Sc626-2C Firmware 3.0; Siemens Scalance Sc632-2C Firmware 3.0; Siemens Scalance Sc636-2C Firmware 3.0; Siemens Scalance Sc642-2C Firmware 3.0; Siemens Scalance Sc646-2C Firmware 3.0. Check the vendor advisory for mitigations.

References

• http://seclists.org/fulldisclosure/2022/May/33
• http://seclists.org/fulldisclosure/2022/May/35
• http://seclists.org/fulldisclosure/2022/May/38
• http://www.openwall.com/lists/oss-security/2022/03/25/2
• http://www.openwall.com/lists/oss-security/2022/03/26/1
• https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf
• https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
• https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
• https://github.com/madler/zlib/issues/605
• https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
• https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html
• https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html

Get alerted when CVE-2018-25032 or the next vulnerability affects your stack