Published: 23/05/2017 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

inftrees.c in zlib 1.2.8 might allow context-dependent malicious users to have unspecified impact by leveraging improper pointer arithmetic.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zlib zlib
opensuse leap 42.2
opensuse leap 42.1
opensuse opensuse 13.2
debian debian linux 8.0
canonical ubuntu linux 18.04
canonical ubuntu linux 16.04
oracle mysql
oracle database server 18c
oracle jdk 1.8.0
oracle jdk 1.7.0
oracle jdk 1.6.0
oracle jre 1.6.0
oracle jre 1.8.0
oracle jre 1.7.0
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server 7.0
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
redhat enterprise linux eus 7.4
redhat enterprise linux eus 7.5
redhat satellite 5.8
apple tvos
apple iphone os
apple watchos
apple mac os x
nodejs node.js

Debian Bug report logs - #847270 zlib: CVE-2016-9840 CVE-2016-9841: out-of-bounds pointer Package: src:zlib; Maintainer for src:zlib is Mark Brown <broonie@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 6 Dec 2016 20:45:01 UTC Severity: important Tags: patch, security, upstream Found ...

Several security issues were fixed in zlib ...

Several security issues were fixed in rsync ...

Synopsis Critical: java-180-oracle security update Type/Severity Security Advisory: Critical Topic An update for java-180-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a secur ...

Synopsis Important: java-170-oracle security update Type/Severity Security Advisory: Important Topic An update for java-170-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a sec ...

Synopsis Moderate: java-160-ibm security update Type/Severity Security Advisory: Moderate Topic An update for java-160-ibm is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring ...

Synopsis Moderate: java-180-ibm security update Type/Severity Security Advisory: Moderate Topic An update for java-180-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 SupplementaryRed Hat Product Security has rated this update as having a security impact ...

Synopsis Important: java-180-ibm security update Type/Severity Security Advisory: Important Topic An update for java-180-ibm is now available for Red Hat Satellite 58 and Red Hat Satellite 58 ELSRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerab ...

Synopsis Moderate: java-171-ibm security update Type/Severity Security Advisory: Moderate Topic An update for java-171-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 SupplementaryRed Hat Product Security has rated this update as having a security impact ...

Synopsis Important: java-160-sun security update Type/Severity Security Advisory: Important Topic An update for java-160-sun is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security ...

inftreesc in zlib 128 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic ...

Paclair is a Python3 Cli tool to interact with Coreos's Clair (https://github.com/coreos/clair).

Paclair Paclair is a Python3 Cli tool to interact with Coreos's Clair Features: Now compatible with Clair V3 (delete is not available) No need to have docker installed since Paclair interacts directly with the registries Compatible with all registries Simple to use Easy integration in a CI job thanks to a lightweight output mode Installation To install Paclair, sim

NVD-CWE-noinfo https://access.redhat.com/errata/RHSA-2017:1221 https://access.redhat.com/errata/RHSA-2017:1220 https://access.redhat.com/errata/RHSA-2017:3047 http://www.openwall.com/lists/oss-security/2016/12/05/21 http://www.securityfocus.com/bid/95131 https://access.redhat.com/errata/RHSA-2017:3046 http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html https://security.gentoo.org/glsa/201701-56 http://www.securitytracker.com/id/1039427 https://access.redhat.com/errata/RHSA-2017:1222 http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html https://access.redhat.com/errata/RHSA-2017:3453 http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html https://access.redhat.com/errata/RHSA-2017:2999 https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html https://usn.ubuntu.com/4246-1/https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html https://usn.ubuntu.com/4292-1/http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html https://www.oracle.com/security-alerts/cpujul2020.html http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html https://support.apple.com/HT208144 https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0 https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib https://bugzilla.redhat.com/show_bug.cgi?id=1402345 https://support.apple.com/HT208113 https://support.apple.com/HT208112 https://support.apple.com/HT208115 https://wiki.mozilla.org/images/0/09/Zlib-report.pdf https://security.gentoo.org/glsa/202007-54 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847270 https://nvd.nist.gov https://github.com/yebinama/paclair https://usn.ubuntu.com/4246-1/

CVE-2016-9840

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect