NetSight
IP …
critical9.8

CVE-2016-9841

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Impact

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Affected products

VendorProductAffected versions
ZlibZlib
from 1.2.0 before 1.2.9
OpensuseLeap
Versions 42.1, 42.2
OpensuseOpensuse
Version 13.2
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 16.04, 18.04
OracleDatabase Server
Version 18c
OracleJdk
Versions 1.6.0, 1.7.0, 1.8.0
OracleJre
Versions 1.6.0, 1.7.0, 1.8.0
OracleMysql
from 5.5.0 through 5.5.61
from 5.6.0 through 5.6.41
from 5.7.0 through 5.7.23
from 8.0.0 through 8.0.12
RedhatSatellite
Version 5.8
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 7.4, 7.5

References