CVE-2018-25032
HighAdvisory
Published 25 Mar 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.517
- 99th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,469
- of 17,790 indexed, latest versions
- Container images
- 1,471
- deployed by those charts
- Fix available
- 10 of 10
- affected packages
Red Hat Security Advisory: zlib security update
Carried by container images the latest versions of 1,469 of 17,790 indexed charts deploy, on 1,471 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| zlibrpm | 1.2.7-18.el7, 1.2.7-19.el7_9, 1.2.11-3.12.1, 1.2.11-3.18.1+7 more | 0:1.2.7-20.el7_9, 0:1.2.11-11.el8_1.1, 0:1.2.11-18.el8_5, 1.2.11-150000.3.30.1 | 96 |
| rsyncrpm | 3.1.3-7.el8, 3.1.3-7.el8_2.2, 3.1.3-12.el8, 3.1.3-12.el8_4.2 | 0:3.1.3-7.el8_2.1, 0:3.1.3-12.el8_4.1, 0:3.1.3-14.el8_6.2 | 10 |
| zlibdeb | 1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+7 more | 1:1.2.8.dfsg-1ubuntu1.1+esm1, 1:1.2.8.dfsg-2ubuntu4.3+esm1, 1:1.2.8.dfsg-5+deb9u1, 1:1.2.11.dfsg-0ubuntu2.1+3 more | 830 |
| zlibapk | 1.2.11-r3 | 1.2.12-r0 | 536 |
| nokogirigem | 1.8.2, 1.10.8, 1.10.9, 1.10.10+4 more | 1.13.4 | 21 |
| rsyncdeb | 3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+3 more | 3.1.1-3ubuntu1.3+esm1, 3.1.2-2.1ubuntu1.4, 3.1.3-8ubuntu0.3 | 20 |
| mariadbapk | 10.5.8-r0, 10.5.9-r0, 10.5.11-r0, 10.5.12-r0+4 more | 10.5.17-r0, 10.6.9-r0 | 11 |
| klibcdeb | 2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3 | 2.0.3-0ubuntu1.14.04.3+esm3 | 7 |
| mariadb-10.3deb | 1:10.3.34-0ubuntu0.20.04.1 | 1:10.3.37-0ubuntu0.20.04.1 | 1 |
| mariadb-10.6deb | 1:10.6.7-2ubuntu1 | 1:10.6.11-0ubuntu0.22.04.1 | 1 |
- OSV records
- ALPINE-CVE-2018-25032GHSA-jc36-42cf-vqwjRHSA-2022:1591RHSA-2022:1642RHSA-2022:2192RHSA-2022:2198RHSA-2022:2201RHSA-2022:2213UBUNTU-CVE-2018-25032DLA-2968-1DSA-5111-1SUSE-SU-2022:1061-1
- Also known as
- PSF-2022-3, RHSA-2022:1661, RHSA-2022:4845, RHSA-2023:0943, RHSA-2023:0975, USN-5355-1, USN-5355-2, USN-5359-1, USN-5359-2, USN-5739-1, USN-6736-1
Charts affected
1,469 by stars
Container images carrying it
1,471 by charts deploying them
A fixed version is listed for 10 of the 10 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mcr.microsoft.com/ | e1e9cf5297a6 | zlib | 1:1.2.11.dfsg-1+deb10u1 | 1 |
| public.ecr.aws/ | 442cc3b32935 | zlib | 1.2.12-r0 | 1 |
| public.ecr.aws/ | 573779e57fae | zlib | 1:1.2.11.dfsg-2ubuntu1.3 | 1 |
| quay.io/ | cdefc81c6b2e | zlib | 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | 6c308e9732e1 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | c2126f99e5c9 | zlib | 1:1.2.8.dfsg-5+deb9u1 | 1 |
| quay.io/ | ea7bb56278ab | zlib | 1:1.2.8.dfsg-5+deb9u1 | 1 |
| quay.io/ | 5d1c2cf4c538 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 10df27bc5560 | zlib | 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | 5d25d47d6e17 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | a88add0f8c93 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | a3b9a07648b6 | rsync zlib | 0:3.1.3-12.el8_4.1 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | 36ea8f34aa6b | zlib | 1.2.12-r0 | 1 |
| quay.io/ | b550ae5c7179 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | fae21f06131f | zlib | 1:1.2.11.dfsg-1+deb10u1 | 1 |
| quay.io/ | 5ac114e567ed | zlib | 1:1.2.11.dfsg-1+deb10u1 | 1 |
| quay.io/ | bb40472e4ff5 | rsync zlib | 0:3.1.3-14.el8_6.2 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | ea838e5b4051 | zlib | 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | 7a07ee730305 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 9663f06adcb1 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 7a4b9fedc724 | rsync zlib | 0:3.1.3-7.el8_2.1 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | 01c3b7acb301 | zlib | 1:1.2.8.dfsg-5+deb9u1 | 1 |
| quay.io/ | 041df93e2bac | zlib | 1:1.2.8.dfsg-5+deb9u1 | 1 |
| quay.io/ | bb0a980bc2bf | zlib | 1.2.12-r0 | 1 |
| quay.io/ | c2ed16080689 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 3029dc0f1d38 | zlib | 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | 36ce77526145 | zlib | 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | 18feb3906286 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 1f025ae37b7b | zlib | 1.2.12-r0 | 1 |
| quay.io/ | a25886092fa4 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 34de6387233b | zlib | 1:1.2.11.dfsg-1+deb10u1 | 1 |
| quay.io/ | eaa71a8cadef | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 6d56f69b15a3 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | e383ba3e0966 | rsync | 0:3.1.3-14.el8_6.2 | 1 |
| quay.io/ | c2851757eca4 | zlib | 0:1.2.11-11.el8_1.1 | 1 |
| quay.io/ | 21164241c045 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 58cb99053bb3 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 1a9ce0b8fbd4 | zlib | 1:1.2.11.dfsg-2+deb11u1 | 1 |
| quay.io/ | 99ccdfd543e1 | zlib | 1:1.2.11.dfsg-1+deb10u1 | 1 |
| quay.io/ | a1c3843b03bc | zlib | 1:1.2.8.dfsg-2ubuntu4.3+esm1 | 1 |
| quay.io/ | 107a7c73af59 | zlib | 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | becd3e39360a | zlib | 1.2.12-r0 | 1 |
| quay.io/ | ecd26b74a01f | zlib | 1.2.12-r0 | 1 |
| quay.io/ | febeebebe762 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 6722d5041b47 | rsync zlib | 0:3.1.3-14.el8_6.2 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | 0bbe8b451fa3 | zlib | 0:1.2.11-18.el8_5 | 1 |
| quay.io/ | 0d21ba756f44 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | 15a6faada3d4 | zlib | 1.2.12-r0 | 1 |
| quay.io/ | a8b21cec412c | zlib | 1:1.2.11.dfsg-1+deb10u1 | 1 |
| quay.io/ | 9a8d95ca0bd9 | zlib | 1:1.2.11.dfsg-1+deb10u1 | 1 |