High · published March 25, 2022
CVSS calls it high at 7.5. It sits in the 98.9th percentile for exploit probability.
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
| Product | Versions | Fixed in |
|---|---|---|
| nokogiri/nokogiri | < 1.13.4 | 1.13.4 |
| python/python | ≥ 3.7.0, < 3.7.14 | 3.7.14 |
| python/python | ≥ 3.8.0, < 3.8.14 | 3.8.14 |
| python/python | ≥ 3.9.0, < 3.9.13 | 3.9.13 |
| python/python | ≥ 3.10.0, < 3.10.5 | 3.10.5 |
| zlib/zlib | ≥ 1.2.2.2, < 1.2.12 | 1.2.12 |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| apple/mac_os_x | ≥ 10.15, < 10.15.7 | 10.15.7 |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/macos | ≥ 11.0, < 11.6.6 | 11.6.6 |
| apple/macos | ≥ 12.0.0, < 12.4 | 12.4 |
| mariadb/mariadb | ≥ 10.3.0, < 10.3.36 | 10.3.36 |
| mariadb/mariadb | ≥ 10.4.0, < 10.4.26 | 10.4.26 |
| mariadb/mariadb | ≥ 10.5.0, < 10.5.17 | 10.5.17 |
| mariadb/mariadb | ≥ 10.6.0, < 10.6.9 | 10.6.9 |
| mariadb/mariadb | ≥ 10.7.0, < 10.7.5 | 10.7.5 |
| mariadb/mariadb | ≥ 10.8.0, < 10.8.4 | 10.8.4 |
| mariadb/mariadb | ≥ 10.9.0, < 10.9.2 | 10.9.2 |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/e-series_santricity_os_controller | ≥ 11.0.0, ≤ 11.70.2 | — |
| netapp/management_services_for_element_software | all versions | — |
| netapp/oncommand_workflow_automation | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| netapp/hci_compute_node | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| siemens/scalance_sc622-2c_firmware | < 3.0 | 3.0 |
| siemens/scalance_sc626-2c_firmware | < 3.0 | 3.0 |
| siemens/scalance_sc632-2c_firmware | < 3.0 | 3.0 |
| siemens/scalance_sc636-2c_firmware | < 3.0 | 3.0 |
| siemens/scalance_sc642-2c_firmware | < 3.0 | 3.0 |
| siemens/scalance_sc646-2c_firmware | < 3.0 | 3.0 |
| azul/zulu | all versions | — |
| azul/zulu | all versions | — |
| azul/zulu | all versions | — |
| azul/zulu | all versions | — |
| azul/zulu | all versions | — |
| azul/zulu | all versions | — |
| azul/zulu | all versions | — |
| goto/gotoassist | < 11.9.18 | 11.9.18 |