Skip to content

CVE-2016-9841 inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

CriticalCVSS 9.8 EPSS 7.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Affected products

ProductAffected versionsFixed in
ubuntu/klibc(Ubuntu:22.04) < 2.0.10-4ubuntu0.1 2.0.10-4ubuntu0.1
debian/rsync(Debian:12) < 3.1.3-6 3.1.3-6
debian/rsync(Debian:13) < 3.1.3-6 3.1.3-6
debian/rsync(Debian:14) < 3.1.3-6 3.1.3-6
debian/zlib(Debian:12) < 1:1.2.8.dfsg-4 1:1.2.8.dfsg-4
debian/zlib(Debian:13) < 1:1.2.8.dfsg-4 1:1.2.8.dfsg-4
debian/zlib(Debian:14) < 1:1.2.8.dfsg-4 1:1.2.8.dfsg-4
alpine/perl(Alpine:v3.5) < 5.24.3-r1 5.24.3-r1
alpine/perl(Alpine:v3.6) < 5.24.3-r1 5.24.3-r1
alpine/zlib(Alpine:v3.3) >= 1.2.0, < 1.2.11-r0 1.2.11-r0
alpine/zlib(Alpine:v3.4) >= 1.2.0, < 1.2.11-r0 1.2.11-r0
alpine/zlib(Alpine:v3.5) >= 1.2.0, < 1.2.11-r0 1.2.11-r0
ubuntu/klibc(Ubuntu:24.04) < 2.0.13-4ubuntu0.1 2.0.13-4ubuntu0.1
ubuntu/zsync(Ubuntu:26.04) All versions No fix listed
Siemens CADRA < V2511 V2511
ubuntu/zsync(Ubuntu:26.10) All versions No fix listed
zlib >= 1.2.0, < 1.2.9 1.2.9
openSUSE leap = 42.1 No fix listed
openSUSE leap = 42.2 No fix listed
opensuse = 13.2 No fix listed
debian linux = 8.0 No fix listed
Canonical Ubuntu Linux = 16.04 No fix listed
Canonical Ubuntu Linux = 18.04 No fix listed
oracle database server = 18c No fix listed
oracle jdk = 1.6.0-update161 No fix listed
Show 49 more
ProductAffected versionsFixed in
oracle jdk = 1.7.0-update151 No fix listed
oracle jdk = 1.8.0-update144 No fix listed
oracle jre = 1.6.0-update161 No fix listed
oracle jre = 1.7.0-update151 No fix listed
oracle jre = 1.8.0-update144 No fix listed
oracle MySQL >= 5.5.0, <= 5.5.61 No fix listed
oracle MySQL >= 5.6.0, <= 5.6.41 No fix listed
oracle MySQL >= 5.7.0, <= 5.7.23 No fix listed
oracle MySQL >= 8.0.0, <= 8.0.12 No fix listed
redhat satellite = 5.8 No fix listed
redhat enterprise linux desktop = 6.0 No fix listed
redhat enterprise linux desktop = 7.0 No fix listed
redhat enterprise linux eus = 7.4 No fix listed
redhat enterprise linux eus = 7.5 No fix listed
redhat enterprise linux server = 6.0 No fix listed
redhat enterprise linux server = 7.0 No fix listed
redhat enterprise linux workstation = 6.0 No fix listed
redhat enterprise linux workstation = 7.0 No fix listed
apple iphone os < 11 11
apple mac os x >= 10.0.0, < 10.13.0 10.13.0
apple tvOS < 11.0 11.0
apple watchOS < 4 4
netapp active iq unified manager >= 7.3 No fix listed
netapp active iq unified manager >= 9.5 No fix listed
netapp cloud backup All versions No fix listed
netapp e-series santricity management All versions No fix listed
netapp e-series santricity os controller >= 11.0.0, <= 11.70.1 No fix listed
netapp e-series santricity storage manager All versions No fix listed
netapp e-series santricity web services All versions No fix listed
netapp oncommand balance All versions No fix listed
netapp oncommand insight All versions No fix listed
netapp oncommand performance manager All versions No fix listed
netapp oncommand shift All versions No fix listed
netapp oncommand unified manager <= 7.1 No fix listed
netapp oncommand unified manager All versions No fix listed
netapp oncommand workflow automation All versions No fix listed
netapp snapmanager All versions No fix listed
netapp solidfire All versions No fix listed
netapp steelstore cloud integrated storage All versions No fix listed
netapp storage replication adapter for clustered data ontap All versions No fix listed
netapp symantec netbackup All versions No fix listed
netapp vasa provider for clustered data ontap >= 7.2 No fix listed
netapp virtual storage console All versions No fix listed
netapp hci storage node All versions No fix listed
nodejs node.js >= 4.0.0, <= 4.1.2 No fix listed
nodejs node.js >= 4.2.0, < 4.8.2 4.8.2
nodejs node.js >= 6.0.0, <= 6.8.1 No fix listed
nodejs node.js >= 6.9.0, < 6.10.2 6.10.2
nodejs node.js >= 7.0.0, < 7.6.0 7.6.0

References