Lucene search

[email protected]NVD:CVE-2016-9841

HistoryMay 23, 2017 - 4:29 a.m.

CVE-2016-9841

2017-05-2304:29:01

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.0%

JSON

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Affected configurations

NVD

Node

zlibzlibRange1.2.0–1.2.9

Node

opensuseleapMatch42.1

opensuseleapMatch42.2

opensuseopensuseMatch13.2

Node

debiandebian_linuxMatch8.0

Node

canonicalubuntu_linuxMatch16.04esm

canonicalubuntu_linuxMatch18.04lts

Node

oracledatabase_serverMatch18c

oraclejdkMatch1.6.0update161

oraclejdkMatch1.7.0update151

oraclejdkMatch1.8.0update144

oraclejreMatch1.6.0update161

oraclejreMatch1.7.0update151

oraclejreMatch1.8.0update144

oraclemysqlRange5.5.0–5.5.61

oraclemysqlRange5.6.0–5.6.41

oraclemysqlRange5.7.0–5.7.23

oraclemysqlRange8.0.0–8.0.12

Node

redhatsatelliteMatch5.8

redhatenterprise_linux_desktopMatch6.0

redhatenterprise_linux_desktopMatch7.0

redhatenterprise_linux_eusMatch7.4

redhatenterprise_linux_eusMatch7.5

redhatenterprise_linux_serverMatch6.0

redhatenterprise_linux_serverMatch7.0

redhatenterprise_linux_workstationMatch6.0

redhatenterprise_linux_workstationMatch7.0

Node

appleiphone_osRange<11

applemac_os_xRange10.0.0–10.13.0

appletvosRange<11.0

applewatchosRange<4

Node

netappactive_iq_unified_managerRange7.3≥windows

netappactive_iq_unified_managerRange9.5≥vmware_vsphere

netappcloud_backupMatch-

netappe-series_santricity_managementMatch-vmware_sra

netappe-series_santricity_managementMatch-vmware_vasa

netappe-series_santricity_managementMatch-vmware_vcenter

netappe-series_santricity_os_controllerRange11.0.0–11.70.1

netappe-series_santricity_storage_managerMatch-

netappe-series_santricity_web_servicesMatch-web_services_proxy

netapponcommand_balanceMatch-

netapponcommand_insightMatch-

netapponcommand_performance_managerMatch-vmware_vsphere

netapponcommand_shiftMatch-

netapponcommand_unified_managerRange≤7.1vsphere

netapponcommand_unified_managerRange≤7.1windows

netapponcommand_unified_managerMatch-7-mode

netapponcommand_workflow_automationMatch-

netappsnapmanagerMatch-oracle

netappsnapmanagerMatch-sap

netappsolidfireMatch-

netappsteelstore_cloud_integrated_storageMatch-

netappstorage_replication_adapter_for_clustered_data_ontapMatch-vmware_vsphere

netappsymantec_netbackupMatch-

netappvasa_provider_for_clustered_data_ontapRange7.2≥

netappvirtual_storage_consoleMatch-vmware_vsphere

netapphci_storage_nodeMatch-

Node

nodejsnode.jsRange4.0.0–4.1.2-

nodejsnode.jsRange4.2.0–4.8.2lts

nodejsnode.jsRange6.0.0–6.8.1-

nodejsnode.jsRange6.9.0–6.10.2lts

nodejsnode.jsRange7.0.0–7.6.0-

References

lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

www.openwall.com/lists/oss-security/2016/12/05/21

www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

www.securityfocus.com/bid/95131

www.securitytracker.com/id/1039427

www.securitytracker.com/id/1039596

access.redhat.com/errata/RHSA-2017:1220

access.redhat.com/errata/RHSA-2017:1221

access.redhat.com/errata/RHSA-2017:1222

access.redhat.com/errata/RHSA-2017:2999

access.redhat.com/errata/RHSA-2017:3046

access.redhat.com/errata/RHSA-2017:3047

access.redhat.com/errata/RHSA-2017:3453

bugzilla.redhat.com/show_bug.cgi?id=1402346

github.com/madler/zlib/commit/9aaec95e82117c1cb0f9624264c3618fc380cecb

lists.debian.org/debian-lts-announce/2019/03/msg00027.html

lists.debian.org/debian-lts-announce/2020/01/msg00030.html

security.gentoo.org/glsa/201701-56

security.gentoo.org/glsa/202007-54

security.netapp.com/advisory/ntap-20171019-0001/

support.apple.com/HT208112

support.apple.com/HT208113

support.apple.com/HT208115

support.apple.com/HT208144

usn.ubuntu.com/4246-1/

usn.ubuntu.com/4292-1/

wiki.mozilla.org/images/0/09/Zlib-report.pdf

wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

www.oracle.com/security-alerts/cpujul2020.html

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.0%

JSON

Related for NVD:CVE-2016-9841

openvas45 osv6 veracode1 cvelist1 debiancve1 ubuntucve1 alpinelinux1 prion1 cve1 nessus52 ibm65 cloudfoundry3 freebsd1 ubuntu4 gentoo2 mageia1 debian2 thn1 photon2 redhat3 suse4 aix1