NetSight
IP …
high8.8

CVE-2016-9840

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Impact

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Affected products

VendorProductAffected versions
BoostBoost
before 1.78.0
ZlibZlib
from 1.2.0.6 before 1.2.9
OpensuseLeap
Versions 42.1, 42.2
OpensuseOpensuse
Version 13.2
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 16.04, 18.04
OracleDatabase Server
Version 18c
OracleJdk
Versions 1.6.0, 1.7.0, 1.8.0
OracleJre
Versions 1.6.0, 1.7.0, 1.8.0
OracleMysql
from 5.5.0 through 5.5.61
from 5.6.0 through 5.6.41
from 5.7.0 through 5.7.23
from 8.0.0 through 8.0.12
RedhatSatellite
Version 5.8
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0

References