CVE-2016-9840

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-9840

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9840.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-9840

Aliases

PSF-2017-2

Related

Published

2017-05-23T04:29:01Z

Modified

2024-09-18T02:42:08.826980Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

References

Affected packages

Alpine:v3.3 / zlib

Package

Name: zlib
Purl: pkg:apk/alpine/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-r0

Affected versions

1.*

1.2.3.3-r2

1.2.3.3-r3

1.2.3.3-r4

1.2.3.3-r5

1.2.3.3-r6

1.2.3.3-r7

1.2.3.4-r0

1.2.3.4-r1

1.2.3.7-r0

1.2.3.7-r1

1.2.3.9-r0

1.2.4-r0

1.2.4-r1

1.2.5-r0

1.2.5-r1

1.2.5-r2

1.2.6-r0

1.2.7-r0

1.2.7-r1

1.2.8-r0

1.2.8-r1

1.2.8-r2

Alpine:v3.4 / zlib

Package

Name: zlib
Purl: pkg:apk/alpine/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-r0

Affected versions

1.*

1.2.3.3-r2

1.2.3.3-r3

1.2.3.3-r4

1.2.3.3-r5

1.2.3.3-r6

1.2.3.3-r7

1.2.3.4-r0

1.2.3.4-r1

1.2.3.7-r0

1.2.3.7-r1

1.2.3.9-r0

1.2.4-r0

1.2.4-r1

1.2.5-r0

1.2.5-r1

1.2.5-r2

1.2.6-r0

1.2.7-r0

1.2.7-r1

1.2.8-r0

1.2.8-r1

1.2.8-r2

Alpine:v3.5 / perl

Package

Name: perl
Purl: pkg:apk/alpine/perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.24.3-r1

Affected versions

5.*

5.10.0-r0

5.10.0-r1

5.10.1-r0

5.10.1-r1

5.10.1-r2

5.12.1-r0

5.12.2-r0

5.12.2-r1

5.12.3-r0

5.14.0-r0

5.14.1-r0

5.14.2-r0

5.14.2-r1

5.16.0-r0

5.16.1-r0

5.16.2-r0

5.16.3-r0

5.18.0-r0

5.18.1-r0

5.18.2-r0

5.20.0-r0

5.20.1-r0

5.20.2-r0

5.20.2-r1

5.22.0-r0

5.22.1-r0

5.22.2-r0

5.24.0-r0

5.24.3-r0

Alpine:v3.5 / zlib

Package

Name: zlib
Purl: pkg:apk/alpine/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-r0

Affected versions

1.*

1.2.3.3-r2

1.2.3.3-r3

1.2.3.3-r4

1.2.3.3-r5

1.2.3.3-r6

1.2.3.3-r7

1.2.3.4-r0

1.2.3.4-r1

1.2.3.7-r0

1.2.3.7-r1

1.2.3.9-r0

1.2.4-r0

1.2.4-r1

1.2.5-r0

1.2.5-r1

1.2.5-r2

1.2.6-r0

1.2.7-r0

1.2.7-r1

1.2.8-r0

1.2.8-r1

1.2.8-r2

Alpine:v3.6 / perl

Package

Name: perl
Purl: pkg:apk/alpine/perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.24.3-r1

Affected versions

5.*

5.10.0-r0

5.10.0-r1

5.10.1-r0

5.10.1-r1

5.10.1-r2

5.12.1-r0

5.12.2-r0

5.12.2-r1

5.12.3-r0

5.14.0-r0

5.14.1-r0

5.14.2-r0

5.14.2-r1

5.16.0-r0

5.16.1-r0

5.16.2-r0

5.16.3-r0

5.18.0-r0

5.18.1-r0

5.18.2-r0

5.20.0-r0

5.20.1-r0

5.20.2-r0

5.20.2-r1

5.22.0-r0

5.22.1-r0

5.22.2-r0

5.24.0-r0

5.24.0-r1

5.24.0-r2

5.24.1-r0

5.24.1-r1

5.24.1-r2

5.24.3-r0

Debian:11 / rsync

Package

Name: rsync
Purl: pkg:deb/debian/rsync?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.3-6

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / rsync

Package

Name: rsync
Purl: pkg:deb/debian/rsync?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.3-6

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / rsync

Package

Name: rsync
Purl: pkg:deb/debian/rsync?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.3-6

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:11 / zlib

Package

Name: zlib
Purl: pkg:deb/debian/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.2.8.dfsg-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / zlib

Package

Name: zlib
Purl: pkg:deb/debian/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.2.8.dfsg-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / zlib

Package

Name: zlib
Purl: pkg:deb/debian/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.2.8.dfsg-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/katello/katello

Affected ranges

Type: GIT
Repo: https://github.com/katello/katello
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

2bb798cee47b5f92038137e3d7fa7f59f7a11ef6

Type: GIT
Repo: https://github.com/madler/zlib
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

6a043145ca6e9c55184013841a67b2fef87e44c0

Type: GIT
Repo: https://github.com/nodejs/node
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

cea049bcf8bb0f9a6e0095dbd5dffdb14dc8f71b

Affected versions

v0.*

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.0.6

v0.1.0

v0.1.1

v0.1.10

v0.1.100

v0.1.101

v0.1.102

v0.1.103

v0.1.104

v0.1.11

v0.1.12

v0.1.13

v0.1.14

v0.1.15

v0.1.16

v0.1.17

v0.1.18

v0.1.19

v0.1.2

v0.1.20

v0.1.21

v0.1.22

v0.1.23

v0.1.24

v0.1.25

v0.1.26

v0.1.27

v0.1.28

v0.1.29

v0.1.3

v0.1.30

v0.1.31

v0.1.32

v0.1.33

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.1.9

v0.1.90

v0.1.91

v0.1.92

v0.1.93

v0.1.94

v0.1.95

v0.1.96

v0.1.97

v0.1.98

v0.1.99

v0.10.0

v0.10.1

v0.10.10

v0.10.11

v0.10.12

v0.10.13

v0.10.14

v0.10.15

v0.10.16

v0.10.17

v0.10.18

v0.10.19

v0.10.2

v0.10.20

v0.10.21

v0.10.22

v0.10.23

v0.10.24

v0.10.25

v0.10.26

v0.10.27

v0.10.28

v0.10.29

v0.10.3

v0.10.30

v0.10.31

v0.10.32

v0.10.4

v0.10.5

v0.10.6

v0.10.7

v0.10.8

v0.10.9

v0.11.0

v0.11.1

v0.11.10

v0.11.11

v0.11.12

v0.11.13

v0.11.2

v0.11.3

v0.11.4

v0.11.5

v0.11.6

v0.11.7

v0.11.8

v0.11.9

v0.2.0

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

v0.3.7

v0.3.8

v0.4.0

v0.4.1

v0.4.10

v0.4.11

v0.4.12

v0.4.2

v0.4.3

v0.4.4

v0.4.5

v0.4.6

v0.4.7

v0.4.8

v0.4.9

v0.5.0

v0.5.1

v0.5.10

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.5-rc1

v0.5.6

v0.5.7

v0.5.8

v0.5.9

v0.6.0

v0.6.1

v0.6.10

v0.6.11

v0.6.12

v0.6.13

v0.6.14

v0.6.15

v0.6.16

v0.6.17

v0.6.18

v0.6.19

v0.6.2

v0.6.20

v0.6.3

v0.6.4

v0.6.5

v0.6.6

v0.6.7

v0.6.8

v0.6.9

v0.7.0

v0.7.1

v0.7.10

v0.7.11

v0.7.12

v0.7.2

v0.7.3

v0.7.4

v0.7.5

v0.7.6

v0.7.7

v0.7.8

v0.7.9

v0.71

v0.79

v0.8

v0.8.0

v0.8.1

v0.8.10

v0.8.11

v0.8.12

v0.8.13

v0.8.14

v0.8.15

v0.8.16

v0.8.17

v0.8.18

v0.8.19

v0.8.2

v0.8.20

v0.8.21

v0.8.22

v0.8.3

v0.8.4

v0.8.5

v0.8.6

v0.8.7

v0.8.8

v0.8.9

v0.9

v0.9.0

v0.9.1

v0.9.10

v0.9.11

v0.9.12

v0.9.2

v0.9.3

v0.9.4

v0.9.5

v0.9.6

v0.9.7

v0.9.8

v0.9.9

v0.91

v0.92

v0.93

v0.94

v0.95

v0.99

v1.*

v1.0-pre

v1.0.0

v1.0.0-release

v1.0.1

v1.0.1-release

v1.0.2

v1.0.2-release

v1.0.3

v1.0.4

v1.0.5

v1.0.7

v1.0.8

v1.0.9

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.1.4

v1.2.0

v1.2.0.1

v1.2.0.2

v1.2.0.3

v1.2.0.4

v1.2.0.5

v1.2.0.6

v1.2.0.7

v1.2.0.8

v1.2.1

v1.2.1.1

v1.2.1.2

v1.2.2

v1.2.2.1

v1.2.2.2

v1.2.2.3

v1.2.2.4

v1.2.3

v1.2.3.1

v1.2.3.2

v1.2.3.3

v1.2.3.4

v1.2.3.5

v1.2.3.6

v1.2.3.7

v1.2.3.8

v1.2.3.9

v1.2.4

v1.2.4-pre1

v1.2.4-pre2

v1.2.4.1

v1.2.4.2

v1.2.4.3

v1.2.4.4

v1.2.4.5

v1.2.5

v1.2.5.1

v1.2.5.2

v1.2.5.3

v1.2.6

v1.2.6.1

v1.2.7

v1.2.7.1

v1.2.7.2

v1.2.7.3

v1.2.8

v1.3.0

v1.4.1

v1.4.2

v1.4.3

v1.5.0

v1.5.1

v1.6.0

v1.6.1

v1.6.2

v1.6.3

v1.6.4

v1.7.0

v1.7.1

v1.8.1

v2.*

v2.0.0

v2.0.1

v2.0.2

v2.1.0

v2.2.0

v2.2.1

v2.3.0

v2.3.1

v2.3.2

v2.3.3

v2.3.4

v2.4.0

v2.5.0

v3.*

v3.0.0