← Back

CVE-2016-9842

nvd nist
Published: May 23, 2017Modified: Jul 14, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Affected (36)

Products: Zlib: Zlib · Opensuse: Leap, Opensuse · Debian: Debian Linux · +5 more
Show all products
Zlib: Zlib · Opensuse: Leap, Opensuse · Debian: Debian Linux · Canonical: Ubuntu Linux · Oracle: Database Server, Jdk, Jre, Mysql · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Workstation, Satellite · Apple: Iphone Os, Mac Os X, Tvos, Watchos · Nodejs: Node.js
Zlib
1 product
Zlib
Opensuse
2 products
Leap
Opensuse
Debian
1 product
Debian Linux
Canonical
1 product
Ubuntu Linux
Oracle
4 products
Database Server
Jdk
Jre
Mysql
Redhat
5 products
Enterprise Linux Desktop
Enterprise Linux Eus
Enterprise Linux Server
Enterprise Linux Workstation
Satellite
Apple
4 products
Iphone Os
Mac Os X
Tvos
Watchos
Nodejs
1 product
Node.js
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Zlib
1.2.3.4 ≤ version < 1.2.9
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Leap
Version 42.1
Leap
Version 42.2
Opensuse
Version 13.2
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 8.0
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Configuration E
11 vulnerable
Vulnerable SoftwareAffected Versions
Database Server
Version 18c
Oracle
Jdk
Version 1.6.0 update161
Jdk
Version 1.7.0 update151
Jdk
Version 1.8.0 update144
Oracle
Jre
Version 1.6.0 update161
Jre
Version 1.7.0 update151
Jre
Version 1.8.0 update144
Oracle
Mysql
5.5.0 ≤ version ≤ 5.5.61
Mysql
5.6.0 ≤ version ≤ 5.6.41
Mysql
5.7.0 ≤ version ≤ 5.7.23
Mysql
8.0.0 ≤ version ≤ 8.0.12
Configuration F
9 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux Desktop
Version 6.0
Enterprise Linux Desktop
Version 7.0
Redhat
Enterprise Linux Eus
Version 7.4
Enterprise Linux Eus
Version 7.5
Redhat
Enterprise Linux Server
Version 6.0
Enterprise Linux Server
Version 7.0
Redhat
Enterprise Linux Workstation
Version 6.0
Enterprise Linux Workstation
Version 7.0
Satellite
Version 5.8
Configuration G
4 vulnerable
Vulnerable SoftwareAffected Versions
Iphone Os
version < 11
Mac Os X
10.0.0 ≤ version < 10.13.0
Tvos
version < 11.0
Watchos
version < 4
Configuration H
5 vulnerable
Vulnerable SoftwareAffected Versions
Nodejs
Node.js
4.0.0 ≤ version ≤ 4.1.2
Node.js
6.0.0 ≤ version ≤ 6.8.1
Node.js
7.0.0 ≤ version < 7.6.0
Node.js
4.2.0 ≤ version < 4.8.2
Node.js
6.9.0 ≤ version < 6.10.2

Related CWEs

CWE-1335
Incorrect Bitwise Shift of Integer
An integer value is specified to be shifted by a negative amount or an amount greater than or equal to the number of bits contained in the value causing an unexpected or indeterminate result.

References (61)

Source: security@opentext.com
Broken Link
Source: security@opentext.com
Broken Link
Source: security@opentext.com
Broken Link
Source: security@opentext.com
Mailing ListPatch
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Broken LinkThird Party AdvisoryVDB Entry
Source: security@opentext.com
Broken LinkThird Party AdvisoryVDB Entry
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Issue TrackingPatch
Source: security@opentext.com
Patch
Source: security@opentext.com
Mailing ListThird Party Advisory
Source: security@opentext.com
Mailing ListThird Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: security@opentext.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.