CVE-2018-25032 Nokogiri affected by zlib's Out-of-bounds Write vulnerability
Attackers can trigger memory corruption in zlib during compression, potentially leading to code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-25032?
CVE-2018-25032 is a high-severity memory corruption vulnerability in Apple Mac Os X, published on 25 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Weakness: CWE-787
Which versions are affected by CVE-2018-25032?
2 open source packages ship an affected version, including nokogiri. It affects 27 products.
| Package | Affected | Fixed in |
|---|---|---|
nokogiri RubyGems | All versions | 1.13.4 |
nokogiri RubyGems | All versions | 1.13.4 |
Linux distribution packages (38)
mingw32-zlib AlmaLinux:8 | All versions | 1.2.8-10.el8 |
mingw32-zlib-static AlmaLinux:8 | All versions | 1.2.8-10.el8 |
mingw64-zlib AlmaLinux:8 | All versions | 1.2.8-10.el8 |
mingw64-zlib-static AlmaLinux:8 | All versions | 1.2.8-10.el8 |
rsync AlmaLinux:8 | All versions | 3.1.3-14.el8 |
rsync-daemon AlmaLinux:8 | All versions | 3.1.3-14.el8 |
zlib AlmaLinux:8 | All versions | 1.2.11-18.el8_5 |
zlib-devel AlmaLinux:8 | All versions | 1.2.11-18.el8_5 |
zlib-static AlmaLinux:8 | All versions | 1.2.11-18.el8_5 |
mingw32-zlib AlmaLinux:9 | All versions | 1.2.12-2.el9 |
mingw32-zlib-static AlmaLinux:9 | All versions | 1.2.12-2.el9 |
mingw64-zlib AlmaLinux:9 | All versions | 1.2.12-2.el9 |
mingw64-zlib-static AlmaLinux:9 | All versions | 1.2.12-2.el9 |
minizip Red Hat:enterprise_linux:7::client | All versions | 0:1.2.7-20.el7_9 |
minizip-devel Red Hat:enterprise_linux:7::client | All versions | 0:1.2.7-20.el7_9 |
zlib Red Hat:enterprise_linux:7::client | All versions | 0:1.2.7-20.el7_9 |
zlib-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:1.2.7-20.el7_9 |
zlib-devel Red Hat:enterprise_linux:7::client | All versions | 0:1.2.7-20.el7_9 |
zlib-static Red Hat:enterprise_linux:7::client | All versions | 0:1.2.7-20.el7_9 |
minizip Red Hat:enterprise_linux:7::computenode | All versions | 0:1.2.7-20.el7_9 |
minizip-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:1.2.7-20.el7_9 |
zlib-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:1.2.7-20.el7_9 |
zlib-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:1.2.7-20.el7_9 |
zlib-static Red Hat:enterprise_linux:7::computenode | All versions | 0:1.2.7-20.el7_9 |
minizip Red Hat:enterprise_linux:7::server | All versions | 0:1.2.7-20.el7_9 |
minizip-devel Red Hat:enterprise_linux:7::server | All versions | 0:1.2.7-20.el7_9 |
zlib Red Hat:enterprise_linux:7::server | All versions | 0:1.2.7-20.el7_9 |
zlib-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:1.2.7-20.el7_9 |
zlib-devel Red Hat:enterprise_linux:7::server | All versions | 0:1.2.7-20.el7_9 |
zlib-static Red Hat:enterprise_linux:7::server | All versions | 0:1.2.7-20.el7_9 |
minizip Red Hat:enterprise_linux:7::workstation | All versions | 0:1.2.7-20.el7_9 |
minizip-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:1.2.7-20.el7_9 |
zlib Red Hat:enterprise_linux:7::workstation | All versions | 0:1.2.7-20.el7_9 |
zlib-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:1.2.7-20.el7_9 |
zlib-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:1.2.7-20.el7_9 |
zlib-static Red Hat:enterprise_linux:7::workstation | All versions | 0:1.2.7-20.el7_9 |
rsync Red Hat:enterprise_linux:8::baseos | All versions | 0:3.1.3-14.el8_6.2 |
rsync-daemon Red Hat:enterprise_linux:8::baseos | All versions | 0:3.1.3-14.el8_6.2 |
Products include Apple Mac Os X, Apple Macos, Azul Zulu, Debian Debian Linux, Fedoraproject Fedora, Goto Gotoassist and 21 more.
How do I fix CVE-2018-25032?
Upgrade nokogiri to 1.13.4 or later.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-25032 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-25032 exists.
Public exploit code: 3 proofs of concept on GitHub.
Other vulnerabilities in Apple Mac Os X
Sources
Also known as ALPINE-CVE-2018-25032, ALSA-2022:1642, ALSA-2022:2201, ALSA-2022:7813, ALSA-2022:8420, AZL-26135 and 73 more.