CVE-2016-9841

CVE-2016-9841

Critical · published May 23, 2017

CVSS v3.1
9.8
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky little flaw in zlib could allow clever attackers to exploit improper pointer arithmetic — like figuring out how to replace the ingredient list on a recipe! Think of zlib like a restaurant kitchen, where the chef needs to follow a precise recipe. If a mischievous cook can manipulate the measurements improperly, they might ruin the dish, or worse, serve something completely different without anyone noticing! This vulnerability could lead to unexpected behaviors or even crashes in applications relying on zlib, potentially allowing attackers to create havoc within your system's operations. While the severity isn't classified, any opening for exploitation should be taken seriously!

Put simply

Think of zlib like a restaurant kitchen, where the chef needs to follow a precise recipe. If a mischievous cook can manipulate the measurements improperly, they might ruin the dish, or worse, serve something completely different without anyone noticing! The issue stems from improper pointer arithmetic in inffast.c of zlib 1.2.8, which could enable context-dependent attacks under specific circumstances, leading to undefined behavior.

What to do

This vulnerability could lead to unexpected behaviors or even crashes in applications relying on zlib, potentially allowing attackers to create havoc within your system's operations. While the severity isn't classified, any opening for exploitation should be taken seriously! To stay safe, consider upgrading zlib to the latest version available, ensuring that any dependencies are also checked. Regularly audit your code to identify where zlib might be in use and apply best practices for input validation. You've got this! Stay vigilant and by following these steps, you can keep your systems running smoothly and securely. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.07550 · 94.5th percentile
Published
2017-05-23T08:29Z
Affected products (62)
ProductVersionsFixed in
zlib/zlib≥ 1.2.0, < 1.2.91.2.9
opensuse/leapall versions—
opensuse/leapall versions—
opensuse/opensuseall versions—
debian/debian_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
oracle/database_serverall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/mysql≥ 5.5.0, ≤ 5.5.61—
oracle/mysql≥ 5.6.0, ≤ 5.6.41—
oracle/mysql≥ 5.7.0, ≤ 5.7.23—
oracle/mysql≥ 8.0.0, ≤ 8.0.12—
redhat/satelliteall versions—
redhat/enterprise_linux_desktopall versions—
redhat/enterprise_linux_desktopall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_serverall versions—
redhat/enterprise_linux_serverall versions—
redhat/enterprise_linux_workstationall versions—
redhat/enterprise_linux_workstationall versions—
apple/iphone_os< 1111
apple/mac_os_x≥ 10.0.0, < 10.13.010.13.0
apple/tvos< 11.011.0
apple/watchos< 44
netapp/active_iq_unified_manager≥ 7.3—
netapp/active_iq_unified_manager≥ 9.5—
netapp/cloud_backupall versions—
netapp/e-series_santricity_managementall versions—
netapp/e-series_santricity_managementall versions—
netapp/e-series_santricity_managementall versions—
netapp/e-series_santricity_os_controller≥ 11.0.0, ≤ 11.70.1—
netapp/e-series_santricity_storage_managerall versions—
netapp/e-series_santricity_web_servicesall versions—
netapp/oncommand_balanceall versions—
netapp/oncommand_insightall versions—
netapp/oncommand_performance_managerall versions—
netapp/oncommand_shiftall versions—
netapp/oncommand_unified_manager≤ 7.1—
netapp/oncommand_unified_manager≤ 7.1—
netapp/oncommand_unified_managerall versions—
netapp/oncommand_workflow_automationall versions—
netapp/snapmanagerall versions—
netapp/snapmanagerall versions—
netapp/solidfireall versions—
netapp/steelstore_cloud_integrated_storageall versions—
netapp/storage_replication_adapter_for_clustered_data_ontapall versions—
netapp/symantec_netbackupall versions—
netapp/vasa_provider_for_clustered_data_ontap≥ 7.2—
netapp/virtual_storage_consoleall versions—
netapp/hci_storage_nodeall versions—
nodejs/node.js≥ 4.0.0, ≤ 4.1.2—
nodejs/node.js≥ 4.2.0, < 4.8.24.8.2
nodejs/node.js≥ 6.0.0, ≤ 6.8.1—
nodejs/node.js≥ 6.9.0, < 6.10.26.10.2
nodejs/node.js≥ 7.0.0, < 7.6.07.6.0
References (67)
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html · [email protected]http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html · [email protected]http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html · [email protected]http://www.openwall.com/lists/oss-security/2016/12/05/21 · [email protected]http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html · [email protected]http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html · [email protected]http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html · [email protected]http://www.securityfocus.com/bid/95131 · [email protected]http://www.securitytracker.com/id/1039427 · [email protected]http://www.securitytracker.com/id/1039596 · [email protected]https://access.redhat.com/errata/RHSA-2017:1220 · [email protected]https://access.redhat.com/errata/RHSA-2017:1221 · [email protected]https://access.redhat.com/errata/RHSA-2017:1222 · [email protected]https://access.redhat.com/errata/RHSA-2017:2999 · [email protected]https://access.redhat.com/errata/RHSA-2017:3046 · [email protected]https://access.redhat.com/errata/RHSA-2017:3047 · [email protected]https://access.redhat.com/errata/RHSA-2017:3453 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=1402346 · [email protected]https://github.com/madler/zlib/commit/9aaec95e82117c1cb0f9624264c3618fc380cecb · [email protected]https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html · [email protected]https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html · [email protected]https://security.gentoo.org/glsa/201701-56 · [email protected]https://security.gentoo.org/glsa/202007-54 · [email protected]https://security.netapp.com/advisory/ntap-20171019-0001/ · [email protected]https://support.apple.com/HT208112 · [email protected]https://support.apple.com/HT208113 · [email protected]https://support.apple.com/HT208115 · [email protected]https://support.apple.com/HT208144 · [email protected]https://usn.ubuntu.com/4246-1/ · [email protected]https://usn.ubuntu.com/4292-1/ · [email protected]https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib · [email protected]https://wiki.mozilla.org/images/0/09/Zlib-report.pdf · [email protected]https://www.oracle.com/security-alerts/cpujul2020.html · [email protected]http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2016/12/05/21 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/95131 · af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1039427 · af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1039596 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:1220 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:1221 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:1222 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:2999 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:3046 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:3047 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:3453 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=1402346 · af854a3a-2127-422b-91ae-364da2661108https://github.com/madler/zlib/commit/9aaec95e82117c1cb0f9624264c3618fc380cecb · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201701-56 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202007-54 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20171019-0001/ · af854a3a-2127-422b-91ae-364da2661108https://support.apple.com/HT208112 · af854a3a-2127-422b-91ae-364da2661108https://support.apple.com/HT208113 · af854a3a-2127-422b-91ae-364da2661108https://support.apple.com/HT208115 · af854a3a-2127-422b-91ae-364da2661108https://support.apple.com/HT208144 · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4246-1/ · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4292-1/ · af854a3a-2127-422b-91ae-364da2661108https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib · af854a3a-2127-422b-91ae-364da2661108https://wiki.mozilla.org/images/0/09/Zlib-report.pdf · af854a3a-2127-422b-91ae-364da2661108https://www.oracle.com/security-alerts/cpujul2020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-470355.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 23 MAY 03:56Z
    inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
    cvelistv5