CVE:CVE-2018-25032
CNNVD:CNNVD-202203-2221
zlib是美国Mark Adler个人开发者的一个通用的数据压缩库。
zlib 1.2.11 版本存在缓冲区错误漏洞，该漏洞源于如果输入有很多远匹配，压缩时可能出现内存损坏。
solution:Upgrade zlib zlib to a higher version than 1.2.12,and avoid the version (,1.2.12); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade apple mac_os_x to a higher version than 10.15.7,10.15.7,10.15.7:security_update_2020,10.15.7:security_update_2020-001,10.15.7:security_update_2020-005,10.15.7:security_update_2020-007,10.15.7:security_update_2021-001,10.15.7:security_update_2021-002,10.15.7:security_update_2021-003,10.15.7:security_update_2021-006,10.15.7:security_update_2021-007,10.15.7:security_update_2021-008,10.15.7:security_update_2022-001,10.15.7:security_update_2022-002,10.15.7:security_update_2022-003,and avoid the version [10.15,10.15.7),10.15.7,10.15.7:security_update_2020,10.15.7:security_update_2020-001,10.15.7:security_update_2020-005,10.15.7:security_update_2020-007,10.15.7:security_update_2021-001,10.15.7:security_update_2021-002,10.15.7:security_update_2021-003,10.15.7:security_update_2021-006,10.15.7:security_update_2021-007,10.15.7:security_update_2021-008,10.15.7:security_update_2022-001,10.15.7:security_update_2022-002,10.15.7:security_update_2022-003; Upgrade apple macos to a higher version than 11.6.6,12.4,and avoid the version [11.0,11.6.6),[12.0.0,12.4); Upgrade python python to a higher version than 3.7.14,3.8.14,3.9.13,3.10.5,and avoid the version [3.7.0,3.7.14),[3.8.0,3.8.14),[3.9.0,3.9.13),[3.10.0,3.10.5); Upgrade mariadb mariadb to a higher version than 10.3.36,10.4.26,10.5.17,10.6.9,10.7.5,10.8.4,10.9.2,and avoid the version [10.3.0,10.3.36),[10.4.0,10.4.26),[10.5.0,10.5.17),[10.6.0,10.6.9),[10.7.0,10.7.5),[10.8.0,10.8.4),[10.9.0,10.9.2); Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.2,and avoid the version [11.0.0,11.70.2]; Upgrade netapp management_services_for_element_software to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp hci_compute_node to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade siemens scalance_sc622-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc626-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc632-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc636-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc642-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc646-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade azul zulu to a higher version than 6.45,7.52,8.60,11.54,13.46,15.38,17.32,and avoid the version 6.45,7.52,8.60,11.54,13.46,15.38,17.32; Upgrade goto gotoassist to a higher version than 11.9.18,and avoid the version (,11.9.18)