This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-25032 →
DEBIAN-CVE-2018-25032
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Original description
The description as published by the source.
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
libz-mingw-w64
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11+dfsg-5"}]}]
Debian:13
libz-mingw-w64
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11+dfsg-5"}]}]
Debian:14
libz-mingw-w64
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11+dfsg-5"}]}]
Debian:12
zlib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-4"}]}]
Debian:13
zlib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-4"}]}]
Debian:14
zlib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-4"}]}]
References
- advisory security-tracker.debian.org