search

LingalaShalini / openjpeg-2.3.0_after_fix

Other
0 stars 0 forks source link

CVE-2018-25032 (High) detected in multiple libraries #64

Open mend-bolt-for-github[bot] opened 1 year ago

mend-bolt-for-github[bot] commented 1 year ago

CVE-2018-25032 - High Severity Vulnerability

Vulnerable Libraries - zlibv1.2.8, zlibv1.2.8, zlibv1.2.8

Vulnerability Details

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Publish Date: 2022-03-25

URL: CVE-2018-25032

CVSS 3 Score Details (7.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Release Date: 2022-03-25

Fix Resolution: v1.2.12

Step up your Open Source Security Game with Mend here