CVE-2016-9843

Published: May 23, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

Affected (46)

Products: Zlib: Zlib · Opensuse: Leap, Opensuse · Debian: Debian Linux · +7 more

Show all products

1 product

2 products

1 product

1 product

4 products

5 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Workstation

4 products

4 products

Active Iq Unified Manager

Oncommand Insight

Oncommand Workflow Automation

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zlib Zlib	1.2.0 ≤ version < 1.2.9

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Leap	Version 42.2
Opensuse Opensuse	Version 13.2

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04

Configuration E

11 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 18c
Oracle Jdk	Version 1.6.0 update161
Oracle Jdk	Version 1.7.0 update151
Oracle Jdk	Version 1.8.0 update144
Oracle Jre	Version 1.6.0 update161
Oracle Jre	Version 1.7.0 update151
Oracle Jre	Version 1.8.0 update144
Oracle Mysql	5.5.0 ≤ version ≤ 5.5.61
Oracle Mysql	5.6.0 ≤ version ≤ 5.6.41
Oracle Mysql	5.7.0 ≤ version ≤ 5.7.23
Oracle Mysql	8.0.0 ≤ version ≤ 8.0.12

Configuration F

9 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Satellite	Version 5.8

Configuration G

4 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	version < 11
Apple Mac Os X	10.0.0 ≤ version < 10.13.0
Apple Tvos	version < 11.0
Apple Watchos	version < 4

Configuration H

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	version ≥ 9.5
Netapp Active Iq Unified Manager	version ≥ 7.3
Netapp Oncommand Insight	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Snapcenter	All versions

Configuration I

5 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	10.0.0 ≤ version < 10.0.37
Mariadb Mariadb	10.1.0 ≤ version < 10.1.37
Mariadb Mariadb	10.2.0 ≤ version < 10.2.19
Mariadb Mariadb	10.3.0 ≤ version < 10.3.11
Mariadb Mariadb	5.5.0 ≤ version < 5.5.62

Configuration J

5 vulnerable

Vulnerable Software	Affected Versions
Nodejs Node.js	4.0.0 ≤ version ≤ 4.1.2
Nodejs Node.js	6.0.0 ≤ version ≤ 6.8.1
Nodejs Node.js	7.0.0 ≤ version < 7.6.0
Nodejs Node.js	4.2.0 ≤ version < 4.8.2
Nodejs Node.js	6.9.0 ≤ version < 6.10.2

References (66)

http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

Source: security@opentext.com

http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

Source: security@opentext.com

http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

Source: security@opentext.com

http://www.openwall.com/lists/oss-security/2016/12/05/21

Source: security@opentext.com

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Source: security@opentext.com

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: security@opentext.com

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Source: security@opentext.com

http://www.securityfocus.com/bid/95131

Source: security@opentext.com

http://www.securitytracker.com/id/1039427

Source: security@opentext.com

http://www.securitytracker.com/id/1041888

Source: security@opentext.com

https://access.redhat.com/errata/RHSA-2017:1220

Source: security@opentext.com

https://access.redhat.com/errata/RHSA-2017:1221

Source: security@opentext.com

https://access.redhat.com/errata/RHSA-2017:1222

Source: security@opentext.com

https://access.redhat.com/errata/RHSA-2017:2999

Source: security@opentext.com

https://access.redhat.com/errata/RHSA-2017:3046

Source: security@opentext.com

https://access.redhat.com/errata/RHSA-2017:3047

Source: security@opentext.com

https://access.redhat.com/errata/RHSA-2017:3453

Source: security@opentext.com

https://bugzilla.redhat.com/show_bug.cgi?id=1402351

Source: security@opentext.com

https://github.com/madler/zlib/commit/d1d577490c15a0c6862473d7576352a9f18ef811

Source: security@opentext.com

https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html

Source: security@opentext.com

https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html

Source: security@opentext.com

https://security.gentoo.org/glsa/201701-56

Source: security@opentext.com

https://security.gentoo.org/glsa/202007-54

Source: security@opentext.com

https://security.netapp.com/advisory/ntap-20181018-0002/

Source: security@opentext.com

https://support.apple.com/HT208112

Source: security@opentext.com

https://support.apple.com/HT208113

Source: security@opentext.com

https://support.apple.com/HT208115

Source: security@opentext.com

https://support.apple.com/HT208144

Source: security@opentext.com

https://usn.ubuntu.com/4246-1/

Source: security@opentext.com

https://usn.ubuntu.com/4292-1/

Source: security@opentext.com

https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

Source: security@opentext.com

https://wiki.mozilla.org/images/0/09/Zlib-report.pdf

Source: security@opentext.com

https://www.oracle.com/security-alerts/cpujul2020.html

Source: security@opentext.com

http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html