USN-4246-1

Dashboard / Vulnerabilities / USN-4246-1

USN-4246-1

Summary: zlib vulnerabilities

Details: It was discovered that zlib incorrectly handled pointer arithmetic. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841) It was discovered that zlib incorrectly handled vectors involving left shifts of negative integers. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9842) It was discovered that zlib incorrectly handled vectors involving big-endian CRC calculation. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9843)

References: https://ubuntu.com/security/notices/USN-4246-1, https://ubuntu.com/security/CVE-2016-9840, https://ubuntu.com/security/CVE-2016-9841, https://ubuntu.com/security/CVE-2016-9842, https://ubuntu.com/security/CVE-2016-9843