CVEvulnerability

CVE-2016-9843

9.8 CRITICAL Published 2017-05-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-05-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

Affected configurations

• zlib zlib (>= 1.2.0 < 1.2.9) • opensuse leap 42.1 • opensuse leap 42.2 • opensuse opensuse 13.2 • debian debian linux 8.0 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • oracle database server 18c • oracle jdk 1.6.0 • oracle jdk 1.7.0 • oracle jdk 1.8.0 • oracle jre 1.6.0 • oracle jre 1.7.0 • oracle jre 1.8.0 • oracle mysql (>= 5.5.0 <= 5.5.61) • oracle mysql (>= 5.6.0 <= 5.6.41) • oracle mysql (>= 5.7.0 <= 5.7.23) • oracle mysql (>= 8.0.0 <= 8.0.12) • redhat satellite 5.8 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux eus 7.4 • redhat enterprise linux eus 7.5 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0 • apple iphone os (< 11) • apple mac os x (>= 10.0.0 < 10.13.0) • apple tvos (< 11.0) • apple watchos (< 4) • netapp active iq unified manager (>= 7.3) • netapp active iq unified manager (>= 9.5) • netapp oncommand insight • netapp oncommand workflow automation • netapp snapcenter • mariadb mariadb (>= 5.5.0 < 5.5.62) • mariadb mariadb (>= 10.0.0 < 10.0.37) • mariadb mariadb (>= 10.1.0 < 10.1.37) • mariadb mariadb (>= 10.2.0 < 10.2.19) • mariadb mariadb (>= 10.3.0 < 10.3.11) • nodejs node.js (>= 4.0.0 <= 4.1.2) • nodejs node.js (>= 4.2.0 < 4.8.2) • nodejs node.js (>= 6.0.0 <= 6.8.1) • nodejs node.js (>= 6.9.0 < 6.10.2) • nodejs node.js (>= 7.0.0 < 7.6.0)

References