CVEvulnerability

CVE-2016-9840

8.8 HIGH Published 2017-05-23 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2017-05-23
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Affected configurations

• boost boost (< 1.78.0) • zlib zlib (>= 1.2.0.6 < 1.2.9) • opensuse leap 42.1 • opensuse leap 42.2 • opensuse opensuse 13.2 • debian debian linux 8.0 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • oracle database server 18c • oracle jdk 1.6.0 • oracle jdk 1.7.0 • oracle jdk 1.8.0 • oracle jre 1.6.0 • oracle jre 1.7.0 • oracle jre 1.8.0 • oracle mysql (>= 5.5.0 <= 5.5.61) • oracle mysql (>= 5.6.0 <= 5.6.41) • oracle mysql (>= 5.7.0 <= 5.7.23) • oracle mysql (>= 8.0.0 <= 8.0.12) • redhat satellite 5.8 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux eus 7.4 • redhat enterprise linux eus 7.5 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0 • apple iphone os (< 11) • apple mac os x (>= 10.0.0 < 10.13.0) • apple tvos (< 11.0) • apple watchos (< 4) • nodejs node.js (>= 4.0.0 <= 4.1.2) • nodejs node.js (>= 4.2.0 < 4.8.2) • nodejs node.js (>= 6.0.0 <= 6.8.1) • nodejs node.js (>= 6.9.0 < 6.10.2) • nodejs node.js (>= 7.0.0 < 7.6.0)

References