CVE-2016-9842

    Dashboard / Vulnerabilities / CVE-2016-9842

    CVE-2016-9842

    Published: 23 May 2017Last Modified: 7 Aug 2026

    Summary:

    Details: The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

    References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html, http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html, http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html, https://cert-portal.siemens.com/productcert/html/ssa-470355.html, http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html, http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html, http://www.securityfocus.com/bid/95131, http://www.securitytracker.com/id/1039427, https://access.redhat.com/errata/RHSA-2017:1220, https://access.redhat.com/errata/RHSA-2017:1221, https://access.redhat.com/errata/RHSA-2017:1222, https://access.redhat.com/errata/RHSA-2017:2999, https://access.redhat.com/errata/RHSA-2017:3046, https://access.redhat.com/errata/RHSA-2017:3047, https://access.redhat.com/errata/RHSA-2017:3453, https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html, https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html, https://security.gentoo.org/glsa/201701-56, https://security.gentoo.org/glsa/202007-54, https://support.apple.com/HT208112, https://support.apple.com/HT208113, https://support.apple.com/HT208115, https://support.apple.com/HT208144, https://usn.ubuntu.com/4246-1/, https://usn.ubuntu.com/4292-1/, https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib, https://wiki.mozilla.org/images/0/09/Zlib-report.pdf, https://www.oracle.com/security-alerts/cpujul2020.html, http://www.openwall.com/lists/oss-security/2016/12/05/21, https://bugzilla.redhat.com/show_bug.cgi?id=1402348, https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- f6194ef39af5864f792412460c354cc339dde7d1
    Fixed -2fa463bacfff79181df1a5270fb67cc679a53e71

    Affected versions

    v1.2.8
    v1.2.7.3
    v1.2.7.2
    v1.2.7.1
    v1.2.7
    v1.2.6.1
    v1.2.6
    v1.2.5.3
    v1.2.5.2
    v1.2.5.1
    v1.2.5
    v1.2.4.5
    v1.2.4.4
    v1.2.4.3
    v1.2.4.2
    v1.2.4.1
    v1.2.4
    v1.2.4-pre2
    v1.2.4-pre1
    v1.2.3.9
    v1.2.3.8
    v1.2.3.7
    v1.2.3.6
    v1.2.3.5
    v1.2.3.4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2016-9842 | CVE-DB