NetSight
IP …
high8.8

CVE-2016-9842

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of neg…

Impact

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Affected products

VendorProductAffected versions
ZlibZlib
from 1.2.3.4 before 1.2.9
OpensuseLeap
Versions 42.1, 42.2
OpensuseOpensuse
Version 13.2
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 16.04, 18.04
OracleDatabase Server
Version 18c
OracleJdk
Versions 1.6.0, 1.7.0, 1.8.0
OracleJre
Versions 1.6.0, 1.7.0, 1.8.0
OracleMysql
from 5.5.0 through 5.5.61
from 5.6.0 through 5.6.41
from 5.7.0 through 5.7.23
from 8.0.0 through 8.0.12
RedhatSatellite
Version 5.8
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 7.4, 7.5

Weakness classification

CWE-1335

References