High · published May 23, 2017
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
| Product | Versions | Fixed in |
|---|---|---|
| boost/boost | < 1.78.0 | 1.78.0 |
| zlib/zlib | ≥ 1.2.0.6, < 1.2.9 | 1.2.9 |
| opensuse/leap | all versions | — |
| opensuse/leap | all versions | — |
| opensuse/opensuse | all versions | — |
| debian/debian_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| oracle/database_server | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jre | all versions | — |
| oracle/jre | all versions | — |
| oracle/jre | all versions | — |
| oracle/mysql | ≥ 5.5.0, ≤ 5.5.61 | — |
| oracle/mysql | ≥ 5.6.0, ≤ 5.6.41 | — |
| oracle/mysql | ≥ 5.7.0, ≤ 5.7.23 | — |
| oracle/mysql | ≥ 8.0.0, ≤ 8.0.12 | — |
| redhat/satellite | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| apple/iphone_os | < 11 | 11 |
| apple/mac_os_x | ≥ 10.0.0, < 10.13.0 | 10.13.0 |
| apple/tvos | < 11.0 | 11.0 |
| apple/watchos | < 4 | 4 |
| nodejs/node.js | ≥ 4.0.0, ≤ 4.1.2 | — |
| nodejs/node.js | ≥ 4.2.0, < 4.8.2 | 4.8.2 |
| nodejs/node.js | ≥ 6.0.0, ≤ 6.8.1 | — |
| nodejs/node.js | ≥ 6.9.0, < 6.10.2 | 6.10.2 |
| nodejs/node.js | ≥ 7.0.0, < 7.6.0 | 7.6.0 |