Buffer overflow in Zlib - CVE-2018-25032

Vulnerability identifier: #VU61671

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2018-25032

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
Zlib
MongoDB driver for C
VMware Tanzu Application Service for VMs
Isolation Segment
App Connect Enterprise Certified Container
IBM Operations Analytics Predictive Insights
Service Telemetry Framework
Cryostat
Red Hat Advanced Cluster Management for Kubernetes
IBM Security Guardium Key Lifecycle Manager (GKLM)
Red Hat Advanced Cluster Security for Kubernetes
Oracle VM Server for x86
IBM Cloud Object Storage Systems
Dell Secure Connect Gateway
IBM Intelligent Operations Center
OpenShift Logging
Tivoli Composite Application Manager for Transactions
IBM Cloud Application Performance Management (APM)
WebSphere Remote Server
Oracle Communications Diameter Signaling Router
Tenable Nessus
IBM Security Verify Governance
Oracle HTTP Server
IBM Robotic Process Automation
Oracle Communications Cloud Native Core Network Exposure Function
Autodesk Infraworks
Spectrum Discover
IBM Aspera Orchestrator
Session Smart Router
IBM Tivoli Business Service Manager
IBM Tivoli Monitoring
PowerProtect Data Domain
IBM MQ
IBM QRadar WinCollect Agent
IBM Spectrum Protect Plus
Red Hat OpenStack
NetWorker
SPSS Statistics
Arch Linux
Gentoo Linux
Amazon Linux AMI
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
CentOS
Anolis OS
IBM AIX
IBM i
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Oracle Linux
macOS
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
Oracle Solaris
FreeBSD
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
openSUSE Leap
openEuler
Fedora
Edgecross Basic Software for Developers ECP-BS1-W-D
Edgecross Basic Software for Windows ECP-BS1-W
IBM Security Verify Gateway
cflinuxfs3
Tanzu Greenplum for Kubernetes
IBM Watson Machine Learning Accelerator
RecoverPoint Classic
Db2 Big SQL
IBM OpenPages with Watson
Content Manager OnDemand for Multiplatforms
dashDB Local
Oracle Siebel CRM
Autodesk AutoCAD
IBM Aspera Shares
IBM Aspera Console
EMC ECS
IBM Sterling Connect:Direct for i5/OS
Platform Automation Toolkit
Database Operator for FoundationDB
Cognos Dashboards on Cloud Pak for Data
XtremIO X2
Storage Protect Server
IBM Engineering Systems Design Rhapsody
Wyse Device Agent
SINAMICS PERFECT HARMONY GH180 6SR5
SINAMICS SL150
SINAMICS GL150
LANTIME Operating System Firmware (LTOS)
SCALANCE S615
API Manager
Red Hat OpenShift GitOps
IBM Aspera Faspex for Linux
IBM Aspera Faspex for Windows
IBM QRadar Network Packet Capture
IBM QRadar Network Security
IBM Integrated Analytics System
API Gateway
IBM VIOS
elfutils (Red Hat package)
zlib (Red Hat package)
imgbased (Red Hat package)
redhat-release-virtualization-host (Red Hat package)
redhat-virtualization-host (Red Hat package)
redhat-virtualization-host-productimg (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
klibc-utils (Ubuntu package)
libklibc (Ubuntu package)
zlib-debugsource
zlib-debuginfo
zlib-32bit
zlib
zlib-static
zlib-devel
minizip-devel
minizip
lib64z1 (Ubuntu package)
libx32z1 (Ubuntu package)
lib32z1 (Ubuntu package)
zlib1g (Ubuntu package)
mingw64-zlib-static
mingw64-zlib
mingw32-zlib-static
mingw32-zlib
mingw-zlib (Red Hat package)
libz1-debuginfo-32bit
libz1-debuginfo
libz1-32bit
libz1
zlib (Debian package)
zlib-devel-static
zlib-devel-32bit
zlib-help
libz1-32bit-debuginfo
libminizip1-debuginfo
libminizip1
sys-libs/zlib
rsync
rsync (Ubuntu package)
rsync (Red Hat package)
rsync-daemon
libpython3_9-1_0-32bit
python39-testsuite-debuginfo
libpython3_9-1_0-32bit-debuginfo
python39-32bit
python39-32bit-debuginfo
python39-base-32bit
python39-base-32bit-debuginfo
python39-base-debuginfo
python39-tk
python39-tools
python39-tk-debuginfo
python39-base
python39-idle
libpython3_9-1_0-debuginfo
python39-debuginfo
python39-debugsource
python39-testsuite
python39-devel
python39-dbm-debuginfo
python39-dbm
python39-curses-debuginfo
python39-curses
python39-core-debugsource
python39-doc
python39-doc-devhelp
libpython3_9-1_0
python39
ovirt-node-ng (Red Hat package)
mariadb-server (Ubuntu package)
libmariadbd19-debuginfo
mariadb-client-debuginfo
mariadb-errormessages
mariadb-tools-debuginfo
mariadb-tools
mariadb-debugsource
mariadb-debuginfo
mariadb-client
mariadb
libmariadbd19
libmariadbd-devel
uboot-tools
Red Hat OpenShift Serverless
Harbor
OpenShift Service Mesh
VMware Tanzu Operations Manager
Red Hat Virtualization
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM Spectrum Virtualize
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
IBM Tivoli Network Manager (ITNM)
IBM Connect Direct for Microsoft Windows
IBM Edge Application Manager
IBM DataPower Gateway
IBM Spectrum Protect Backup-Archive Client
Cloud Pak for Security (CP4S)
IBM Qradar SIEM
Oracle Outside In Technology
Discourse
Red Hat Virtualization Host
MySQL Server
Oracle Database Server
IBM DB2
Splunk Universal Forwarder
Oracle Communications Session Border Controller
IBM Security Verify Access
Juniper Junos Space
Zimbra Collaboration
PeopleSoft Enterprise PeopleTools
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Oracle Communications Cloud Native Core Console
Oracle Communications Cloud Native Core Unified Data Repository
IBM Spectrum Protect for Space Management
AutoCAD Electrical
AutoCAD Architecture
AutoCAD Mac LT
AutoCAD Mac
AutoCAD LT
Autodesk Civil 3D
AutoCAD Map 3D
AutoCAD Plant 3D
AutoCAD Mechanical
AutoCAD MEP
AutoCAD for Mac LT
Advance Steel
Alias Surface
Alias AutoStudio
Alias Concept
SCALANCE WAM766-1 (EU)
SCALANCE WAM766-1 (US)
SCALANCE WAM766-1 EEC (EU)
SCALANCE WAM766-1 EEC (US)
SCALANCE WUM763-1
SCALANCE WUM766-1 (EU)
SCALANCE WUM766-1 (US)
SCALANCE WAM763-1
SCALANCE SC646-2C
SCALANCE SC642-2C
SCALANCE SC626-2C
SCALANCE SC622-2C
SCALANCE SC632-2C
SCALANCE SC636-2C
SCALANCE M876-4 (NAM)
SCALANCE M816-1 ADSL-Router (Annex B)
SCALANCE M826-2 SHDSL-Router
SCALANCE M874-2
SCALANCE M874-3
SCALANCE M876-3 (EVDO)
SCALANCE M876-3 (ROK)
SCALANCE M876-4
SCALANCE M876-4 (EU)
SCALANCE MUM853-1 (EU)
SCALANCE MUM856-1 (EU)
SCALANCE M816-1 ADSL-Router (Annex A)
SCALANCE M812-1 ADSL-Router (Annex B)
SCALANCE MUM856-1 (RoW)
SCALANCE S615 EEC
SCALANCE M812-1 ADSL-Router (Annex A)
SCALANCE M804PB
RUGGEDCOM RM1224 LTE(4G) NAM
RUGGEDCOM RM1224 LTE(4G) EU
IBM Cloud Pak System
ownCloud Android App
Dell EMC Storage Monitoring and Reporting (SMR)
Kaspersky Security for Virtual Environments Light Agent for Windows (eng)
Kaspersky Security for Virtual Environments Light Agent for Windows (fr)
Kaspersky Security for Virtual Environments Light Agent for Windows (de)
Kaspersky Security for Virtual Environments Light Agent for Linux
IBM Spectrum Protect for Virtual Environments: Data Protection for VMware
IBM Spectrum Protect for Virtual Environments: Data Protection for Hyper-V
Spectrum Protect Server

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input when compressing data. A remote attacker can pass specially crafted input to the application, trigger memory corruption and perform a denial of service (DoS) attack.

Install updates from vendor's website.

• https://www.openwall.com/lists/oss-security/2022/03/24/1
• https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
• http://www.openwall.com/lists/oss-security/2022/03/25/2
• http://www.openwall.com/lists/oss-security/2022/03/26/1