CVE search · CVE-2016-9841

CVE-2016-9841

critical 9.8

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Open in the NVD CVE.org JSON

Status: Modified
Published: 2017-05-23
Last changed: 2026-10-08
Source: security@opentext.com
Weakness: NVD-CWE-noinfo

Severity

Version	Score	Vector	Source
CVSS 3.1	critical 9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`	nvd@nist.govPrimary
CVSS 2.0	high 7.5	`AV:N/AC:L/Au:N/C:P/I:P/A:P`	nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

zlib · zlib
opensuse · leap
opensuse · opensuse
debian · debian_linux
canonical · ubuntu_linux
oracle · database_server
oracle · jdk
oracle · jre
oracle · mysql
redhat · satellite
redhat · enterprise_linux_desktop
redhat · enterprise_linux_eus
redhat · enterprise_linux_server
redhat · enterprise_linux_workstation
apple · iphone_os
apple · mac_os_x
apple · tvos
apple · watchos
netapp · active_iq_unified_manager
netapp · cloud_backup
netapp · e-series_santricity_management
netapp · e-series_santricity_os_controller
netapp · e-series_santricity_storage_manager
netapp · e-series_santricity_web_services
netapp · oncommand_balance
netapp · oncommand_insight
netapp · oncommand_performance_manager
netapp · oncommand_shift
netapp · oncommand_unified_manager
netapp · oncommand_workflow_automation
netapp · snapmanager
netapp · solidfire
netapp · steelstore_cloud_integrated_storage
netapp · storage_replication_adapter_for_clustered_data_ontap
netapp · symantec_netbackup
netapp · vasa_provider_for_clustered_data_ontap
netapp · virtual_storage_console
netapp · hci_storage_node
nodejs · node.js

References