CVE-2016-9841

Advisory lineage Upstream: 0 Downstream: 35
Modified
Published: 23 May 2017, 03:56
Last modified:06 Aug 2024, 02:59

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (nvd)
EPSS Score
13.49% MEDIUM
13% probability -6.79%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 May 2017, 03:56
Published
Vulnerability first disclosed
06 Aug 2024, 02:59
Last Modified
Vulnerability information updated

Description

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 13.49%• Percentile: 94%

Affected Systems

  • apple•iphone_os

    < 11

  • apple•mac_os_x

    ≥ 10.0.0, < 10.13.0

  • apple•tvos

    < 11.0

  • apple•watchos

    < 4

  • canonical•ubuntu_linux

    16.04 | 18.04

  • debian•debian_linux

    8.0

  • netapp•active_iq_unified_manager

    ≥ 7.3 | ≥ 9.5

  • netapp•cloud_backup

    na

  • netapp•e-series_santricity_management

    na

  • netapp•e-series_santricity_os_controller

    ≥ 11.0.0, ≤ 11.70.1

  • netapp•e-series_santricity_storage_manager

    na

  • netapp•e-series_santricity_web_services

    na

  • netapp•hci_storage_node

    na

  • netapp•oncommand_balance

    na

  • netapp•oncommand_insight

    na

  • netapp•oncommand_performance_manager

    na

  • netapp•oncommand_shift

    na

  • netapp•oncommand_unified_manager

    ≤ 7.1 | na

  • netapp•oncommand_workflow_automation

    na

  • netapp•snapmanager

    na

  • netapp•solidfire

    na

  • netapp•steelstore_cloud_integrated_storage

    na

  • netapp•storage_replication_adapter_for_clustered_data_ontap

    na

  • netapp•symantec_netbackup

    na

  • netapp•vasa_provider_for_clustered_data_ontap

    ≥ 7.2

  • netapp•virtual_storage_console

    na

  • nodejs•node.js

    ≥ 4.0.0, ≤ 4.1.2 | ≥ 4.2.0, < 4.8.2 | ≥ 6.0.0, ≤ 6.8.1 | ≥ 6.9.0, < 6.10.2 | ≥ 7.0.0, < 7.6.0

  • opensuse•leap

    42.1 | 42.2

  • opensuse•opensuse

    13.2

  • oracle•database_server

    18c

  • oracle•jdk

    1.6.0:update161 | 1.7.0:update151 | 1.8.0:update144

  • oracle•jre

    1.6.0:update161 | 1.7.0:update151 | 1.8.0:update144

  • oracle•mysql

    ≥ 5.5.0, ≤ 5.5.61 | ≥ 5.6.0, ≤ 5.6.41 | ≥ 5.7.0, ≤ 5.7.23 | ≥ 8.0.0, ≤ 8.0.12

  • redhat•enterprise_linux_desktop

    6.0 | 7.0

  • redhat•enterprise_linux_eus

    7.4 | 7.5

  • redhat•enterprise_linux_server

    6.0 | 7.0

  • redhat•enterprise_linux_workstation

    6.0 | 7.0

  • redhat•satellite

    5.8

  • zlib•zlib

    ≥ 1.2.0, < 1.2.9

References (33)