CVEvulnerability

CVE-2016-9841

9.8 CRITICAL Published 2017-05-23 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2017-05-23
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Affected configurations

• zlib zlib (>= 1.2.0 < 1.2.9) • opensuse leap 42.1 • opensuse leap 42.2 • opensuse opensuse 13.2 • debian debian linux 8.0 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • oracle database server 18c • oracle jdk 1.6.0 • oracle jdk 1.7.0 • oracle jdk 1.8.0 • oracle jre 1.6.0 • oracle jre 1.7.0 • oracle jre 1.8.0 • oracle mysql (>= 5.5.0 <= 5.5.61) • oracle mysql (>= 5.6.0 <= 5.6.41) • oracle mysql (>= 5.7.0 <= 5.7.23) • oracle mysql (>= 8.0.0 <= 8.0.12) • redhat satellite 5.8 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux eus 7.4 • redhat enterprise linux eus 7.5 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0 • apple iphone os (< 11) • apple mac os x (>= 10.0.0 < 10.13.0) • apple tvos (< 11.0) • apple watchos (< 4) • netapp active iq unified manager (>= 7.3) • netapp active iq unified manager (>= 9.5) • netapp cloud backup • netapp e-series santricity management • netapp e-series santricity os controller (>= 11.0.0 <= 11.70.1) • netapp e-series santricity storage manager • netapp e-series santricity web services • netapp oncommand balance • netapp oncommand insight • netapp oncommand performance manager • netapp oncommand shift • netapp oncommand unified manager (<= 7.1) • netapp oncommand unified manager • netapp oncommand workflow automation • netapp snapmanager • netapp solidfire • netapp steelstore cloud integrated storage • netapp storage replication adapter for clustered data ontap • netapp symantec netbackup • netapp vasa provider for clustered data ontap (>= 7.2) • netapp virtual storage console • netapp hci storage node • nodejs node.js (>= 4.0.0 <= 4.1.2) • nodejs node.js (>= 4.2.0 < 4.8.2) • nodejs node.js (>= 6.0.0 <= 6.8.1) • nodejs node.js (>= 6.9.0 < 6.10.2) • nodejs node.js (>= 7.0.0 < 7.6.0)

References