CVE-2018-25032 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP	ADP	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 25%

Affected Products (NVD)

Vendor	Product	Version
nokogiri	nokogiri	𝑥 < 1.13.4
python	python	3.7.0 ≤ 𝑥 < 3.7.14
python	python	3.8.0 ≤ 𝑥 < 3.8.14
python	python	3.9.0 ≤ 𝑥 < 3.9.13
python	python	3.10.0 ≤ 𝑥 < 3.10.5
zlib	zlib	1.2.2.2 ≤ 𝑥 < 1.2.12
debian	debian_linux	9.0
debian	debian_linux	10.0
debian	debian_linux	11.0
apple	mac_os_x	10.15 ≤ 𝑥 < 10.15.7
apple	mac_os_x	10.15.7
apple	mac_os_x	10.15.7:security_update_2020
apple	mac_os_x	10.15.7:security_update_2020-001
apple	mac_os_x	10.15.7:security_update_2020-005
apple	mac_os_x	10.15.7:security_update_2020-007
apple	mac_os_x	10.15.7:security_update_2021-001
apple	mac_os_x	10.15.7:security_update_2021-002
apple	mac_os_x	10.15.7:security_update_2021-003
apple	mac_os_x	10.15.7:security_update_2021-006
apple	mac_os_x	10.15.7:security_update_2021-007
apple	mac_os_x	10.15.7:security_update_2021-008
apple	mac_os_x	10.15.7:security_update_2022-001
apple	mac_os_x	10.15.7:security_update_2022-002
apple	mac_os_x	10.15.7:security_update_2022-003
apple	macos	11.0 ≤ 𝑥 < 11.6.6
apple	macos	12.0.0 ≤ 𝑥 < 12.4
mariadb	mariadb	10.3.0 ≤ 𝑥 < 10.3.36
mariadb	mariadb	10.4.0 ≤ 𝑥 < 10.4.26
mariadb	mariadb	10.5.0 ≤ 𝑥 < 10.5.17
mariadb	mariadb	10.6.0 ≤ 𝑥 < 10.6.9
mariadb	mariadb	10.7.0 ≤ 𝑥 < 10.7.5
mariadb	mariadb	10.8.0 ≤ 𝑥 < 10.8.4
mariadb	mariadb	10.9.0 ≤ 𝑥 < 10.9.2
netapp	active_iq_unified_manager	-
netapp	e-series_santricity_os_controller	11.0.0 ≤ 𝑥 ≤ 11.70.2
netapp	management_services_for_element_software	-
netapp	oncommand_workflow_automation	-
netapp	ontap_select_deploy_administration_utility	-
netapp	hci_compute_node	-
netapp	h300s_firmware	-
netapp	h500s_firmware	-
netapp	h700s_firmware	-
netapp	h410s_firmware	-
netapp	h410c_firmware	-
siemens	scalance_sc622-2c_firmware	𝑥 < 3.0
siemens	scalance_sc626-2c_firmware	𝑥 < 3.0
siemens	scalance_sc632-2c_firmware	𝑥 < 3.0
siemens	scalance_sc636-2c_firmware	𝑥 < 3.0
siemens	scalance_sc642-2c_firmware	𝑥 < 3.0
siemens	scalance_sc646-2c_firmware	𝑥 < 3.0
azul	zulu	6.45
azul	zulu	7.52
azul	zulu	8.60
azul	zulu	11.54
azul	zulu	13.46
azul	zulu	15.38
azul	zulu	17.32
goto	gotoassist	𝑥 < 11.9.18

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

libz-mingw-w64

bookworm	1.2.13+dfsg-1 fixed
bullseye	no-dsa
buster	no-dsa
sid	1.3.1+dfsg-1 fixed
trixie	1.3.1+dfsg-1 fixed

zlib

bookworm	1:1.2.13.dfsg-1 fixed
bullseye	1:1.2.11.dfsg-2+deb11u2 no-dsa
bullseye (security)	1:1.2.11.dfsg-2+deb11u2 fixed
buster	no-dsa
sid	1:1.3.dfsg+really1.3.1-1 fixed
trixie	1:1.3.dfsg+really1.3.1-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

klibc

bionic	Fixed 2.0.4-9ubuntu2.2+esm1 released
focal	Fixed 2.0.7-1ubuntu5.2 released
jammy	Fixed 2.0.10-4ubuntu0.1 released
mantic	Fixed 2.0.13-1ubuntu0.1 released
noble	Fixed 2.0.13-4ubuntu0.1 released
trusty	Fixed 2.0.3-0ubuntu1.14.04.3+esm3 released
xenial	Fixed 2.0.4-8ubuntu1.16.04.4+esm2 released

mariadb-10.3

bionic	dne
focal	Fixed 1:10.3.37-0ubuntu0.20.04.1 released
jammy	dne
kinetic	dne
trusty	ignored
xenial	ignored

mariadb-10.6

bionic	dne
focal	dne
jammy	Fixed 1:10.6.11-0ubuntu0.22.04.1 released
kinetic	Fixed 1:10.6.9-1 released
noble	dne
trusty	ignored
xenial	ignored

rsync

bionic	Fixed 3.1.2-2.1ubuntu1.4 released
focal	Fixed 3.1.3-8ubuntu0.3 released
impish	not-affected
jammy	not-affected
kinetic	not-affected
mantic	not-affected
noble	not-affected
trusty	not-affected
xenial	Fixed 3.1.1-3ubuntu1.3+esm1 released

zlib

bionic	Fixed 1:1.2.11.dfsg-0ubuntu2.1 released
focal	Fixed 1:1.2.11.dfsg-2ubuntu1.3 released
impish	Fixed 1:1.2.11.dfsg-2ubuntu7.1 released
jammy	Fixed 1:1.2.11.dfsg-2ubuntu9 released
kinetic	Fixed 1:1.2.11.dfsg-2ubuntu9 released
mantic	Fixed 1:1.2.11.dfsg-2ubuntu9 released
noble	Fixed 1:1.2.11.dfsg-2ubuntu9 released
trusty	Fixed 1:1.2.8.dfsg-1ubuntu1.1+esm1 released
xenial	Fixed 1:1.2.8.dfsg-2ubuntu4.3+esm1 released