CVE search · CVE-2016-9842
CVE-2016-9842
high 8.8
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
Details
- Status
- Modified
- Published
- Last changed
- Source
- security@opentext.com
- Weakness
- NVD-CWE-noinfo, CWE-1335
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
| CVSS 3.1 | high 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
| CVSS 2.0 | medium 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- zlib · zlib
- opensuse · leap
- opensuse · opensuse
- debian · debian_linux
- canonical · ubuntu_linux
- oracle · database_server
- oracle · jdk
- oracle · jre
- oracle · mysql
- redhat · satellite
- redhat · enterprise_linux_desktop
- redhat · enterprise_linux_eus
- redhat · enterprise_linux_server
- redhat · enterprise_linux_workstation
- apple · iphone_os
- apple · mac_os_x
- apple · tvos
- apple · watchos
- nodejs · node.js
References
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.htmlBroken Link
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.htmlBroken Link
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.htmlBroken Link
- http://www.openwall.com/lists/oss-security/2016/12/05/21Mailing ListPatch
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlThird Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlThird Party Advisory
- http://www.securityfocus.com/bid/95131Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039427Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:1220Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1221Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1222Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2999Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3046Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3047Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3453Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1402348Issue TrackingPatch
- https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958Patch
- https://lists.debian.org/debian-lts-announce/2019/03/msg00027.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/01/msg00030.htmlMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/201701-56Third Party Advisory
- https://security.gentoo.org/glsa/202007-54Third Party Advisory
- https://support.apple.com/HT208112Third Party Advisory
- https://support.apple.com/HT208113Third Party Advisory
- https://support.apple.com/HT208115Third Party Advisory
- https://support.apple.com/HT208144Third Party Advisory
- https://usn.ubuntu.com/4246-1/Third Party Advisory
- https://usn.ubuntu.com/4292-1/Third Party Advisory
- https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlibThird Party Advisory
- https://wiki.mozilla.org/images/0/09/Zlib-report.pdfThird Party Advisory
- https://www.oracle.com/security-alerts/cpujul2020.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.htmlBroken Link
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.htmlBroken Link
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.htmlBroken Link
- http://www.openwall.com/lists/oss-security/2016/12/05/21Mailing ListPatch
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlThird Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlThird Party Advisory
- http://www.securityfocus.com/bid/95131Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039427Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:1220Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1221Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1222Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2999Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3046Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3047Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3453Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1402348Issue TrackingPatch
- https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958Patch
- https://lists.debian.org/debian-lts-announce/2019/03/msg00027.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/01/msg00030.htmlMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/201701-56Third Party Advisory
- https://security.gentoo.org/glsa/202007-54Third Party Advisory
- https://support.apple.com/HT208112Third Party Advisory
- https://support.apple.com/HT208113Third Party Advisory
- https://support.apple.com/HT208115Third Party Advisory
- https://support.apple.com/HT208144Third Party Advisory
- https://usn.ubuntu.com/4246-1/Third Party Advisory
- https://usn.ubuntu.com/4292-1/Third Party Advisory
- https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlibThird Party Advisory
- https://wiki.mozilla.org/images/0/09/Zlib-report.pdfThird Party Advisory
- https://www.oracle.com/security-alerts/cpujul2020.htmlThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-470355.html