Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2016-9841 Details

Description

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-470355.html	siemens-SADP
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	CVE
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	CVE
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	CVE
https://access.redhat.com/errata/RHSA-2017:1220	CVE
https://access.redhat.com/errata/RHSA-2017:1221	CVE
https://access.redhat.com/errata/RHSA-2017:1222	CVE
https://access.redhat.com/errata/RHSA-2017:2999	CVE
https://access.redhat.com/errata/RHSA-2017:3046	CVE
https://access.redhat.com/errata/RHSA-2017:3047	CVE
https://access.redhat.com/errata/RHSA-2017:3453	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=1402346	CVE
https://github.com/madler/zlib/commit/9aaec95e82117c1cb0f9624264c3618fc380cecb	CVE
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	CVE
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	CVE
https://security.gentoo.org/glsa/201701-56	CVE
https://security.gentoo.org/glsa/202007-54	CVE
https://security.netapp.com/advisory/ntap-20171019-0001/	CVE
https://support.apple.com/HT208112	CVE
https://support.apple.com/HT208113	CVE
https://support.apple.com/HT208115	CVE
https://support.apple.com/HT208144	CVE
https://usn.ubuntu.com/4246-1/	CVE
https://usn.ubuntu.com/4292-1/	CVE
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	CVE
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	CVE
https://www.oracle.com/security-alerts/cpujul2020.html	CVE
http://www.openwall.com/lists/oss-security/2016/12/05/21	CVE
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	CVE
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	CVE
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	CVE
http://www.securityfocus.com/bid/95131	CVE
http://www.securitytracker.com/id/1039427	CVE
http://www.securitytracker.com/id/1039596	CVE
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	[email protected]
https://access.redhat.com/errata/RHSA-2017:1220	[email protected]
https://access.redhat.com/errata/RHSA-2017:1221	[email protected]
https://access.redhat.com/errata/RHSA-2017:1222	[email protected]
https://access.redhat.com/errata/RHSA-2017:2999	[email protected]
https://access.redhat.com/errata/RHSA-2017:3046	[email protected]
https://access.redhat.com/errata/RHSA-2017:3047	[email protected]
https://access.redhat.com/errata/RHSA-2017:3453	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=1402346	[email protected]
https://github.com/madler/zlib/commit/9aaec95e82117c1cb0f9624264c3618fc380cecb	[email protected]
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	[email protected]
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	[email protected]
https://security.gentoo.org/glsa/201701-56	[email protected]
https://security.gentoo.org/glsa/202007-54	[email protected]
https://security.netapp.com/advisory/ntap-20171019-0001/	[email protected]
https://support.apple.com/HT208112	[email protected]
https://support.apple.com/HT208113	[email protected]
https://support.apple.com/HT208115	[email protected]
https://support.apple.com/HT208144	[email protected]
https://usn.ubuntu.com/4246-1/	[email protected]
https://usn.ubuntu.com/4292-1/	[email protected]
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	[email protected]
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	[email protected]
https://www.oracle.com/security-alerts/cpujul2020.html	[email protected]
http://www.openwall.com/lists/oss-security/2016/12/05/21	[email protected]
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	[email protected]
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	[email protected]
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	[email protected]
http://www.securityfocus.com/bid/95131	[email protected]
http://www.securitytracker.com/id/1039427	[email protected]
http://www.securitytracker.com/id/1039596	[email protected]

see all 67 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
zlib zlib	>= 1.2.0, < 1.2.9
CPE cpe:2.3:a:zlib:zlib:::::::: Remediation No remediation found in references.
opensuse leap	42.1 42.2
CPE cpe:2.3:o:opensuse:leap:42.1:::::::* cpe:2.3:o:opensuse:leap:42.2:::::::* Remediation No remediation found in references.
opensuse opensuse	13.2
CPE cpe:2.3:o:opensuse:opensuse:13.2:::::::* Remediation No remediation found in references.
debian debian linux	8.0
CPE cpe:2.3:o:debian:debian_linux:8.0:::::::* Remediation No remediation found in references.
canonical ubuntu linux	16.04 18.04
CPE cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts::: Remediation No remediation found in references.
oracle database server	18c
CPE cpe:2.3:a:oracle:database_server:18c:::::::* Remediation No remediation found in references.
oracle jdk	1.6.0 update161 1.7.0 update151 1.8.0 update144
CPE cpe:2.3:a:oracle:jdk:1.6.0:update161:::::: cpe:2.3:a:oracle:jdk:1.7.0:update151:::::: cpe:2.3:a:oracle:jdk:1.8.0:update144:::::: Remediation No remediation found in references.
oracle jre	1.6.0 update161 1.7.0 update151 1.8.0 update144
CPE cpe:2.3:a:oracle:jre:1.6.0:update161:::::: cpe:2.3:a:oracle:jre:1.7.0:update151:::::: cpe:2.3:a:oracle:jre:1.8.0:update144:::::: Remediation No remediation found in references.
oracle mysql	>= 5.5.0, <= 5.5.61 >= 5.6.0, <= 5.6.41 >= 5.7.0, <= 5.7.23 >= 8.0.0, <= 8.0.12
CPE cpe:2.3:a:oracle:mysql:::::::: Remediation No remediation found in references.
redhat satellite	5.8
CPE cpe:2.3:a:redhat:satellite:5.8:::::::* Remediation No remediation found in references.
redhat enterprise linux desktop	6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux eus	7.4 7.5
CPE cpe:2.3:o:redhat:enterprise_linux_eus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.5:::::::* Remediation No remediation found in references.
redhat enterprise linux server	6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux workstation	6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::* Remediation No remediation found in references.
apple iphone os	< 11
CPE cpe:2.3:o:apple:iphone_os:::::::: Remediation No remediation found in references.
apple mac os x	>= 10.0.0, < 10.13.0
CPE cpe:2.3:o:apple:mac_os_x:::::::: Remediation No remediation found in references.
apple tvos	< 11.0
CPE cpe:2.3:o:apple:tvos:::::::: Remediation No remediation found in references.
apple watchos	< 4
CPE cpe:2.3:o:apple:watchos:::::::: Remediation No remediation found in references.
netapp active iq unified manager	>= 7.3 >= 9.5
CPE cpe:2.3:a:netapp:active_iq_unified_manager::::::windows::* cpe:2.3:a:netapp:active_iq_unified_manager::::::vmware_vsphere::* Remediation No remediation found in references.
netapp cloud backup	All versions
CPE cpe:2.3:a:netapp:cloud_backup:-:::::::* Remediation No remediation found in references.
netapp e-series santricity management	All versions
CPE cpe:2.3:a:netapp:e-series_santricity_management:-:::::vmware_sra:: cpe:2.3:a:netapp:e-series_santricity_management:-:::::vmware_vasa:: cpe:2.3:a:netapp:e-series_santricity_management:-:::::vmware_vcenter:: Remediation No remediation found in references.
netapp e-series santricity os controller	>= 11.0.0, <= 11.70.1
CPE cpe:2.3:a:netapp:e-series_santricity_os_controller:::::::: Remediation No remediation found in references.
netapp e-series santricity storage manager	All versions
CPE cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:::::::* Remediation No remediation found in references.
netapp e-series santricity web services	All versions
CPE cpe:2.3:a:netapp:e-series_santricity_web_services:-:::::web_services_proxy:: Remediation No remediation found in references.
netapp oncommand balance	All versions
CPE cpe:2.3:a:netapp:oncommand_balance:-:::::::* Remediation No remediation found in references.
netapp oncommand insight	All versions
CPE cpe:2.3:a:netapp:oncommand_insight:-:::::::* Remediation No remediation found in references.
netapp oncommand performance manager	All versions
CPE cpe:2.3:a:netapp:oncommand_performance_manager:-:::::vmware_vsphere:: Remediation No remediation found in references.
netapp oncommand shift	All versions
CPE cpe:2.3:a:netapp:oncommand_shift:-:::::::* Remediation No remediation found in references.
netapp oncommand unified manager	<= 7.1
CPE cpe:2.3:a:netapp:oncommand_unified_manager::::::vsphere::* cpe:2.3:a:netapp:oncommand_unified_manager::::::windows::* cpe:2.3:a:netapp:oncommand_unified_manager:-:::::7-mode:: Remediation No remediation found in references.
netapp oncommand workflow automation	All versions
CPE cpe:2.3:a:netapp:oncommand_workflow_automation:-:::::::* Remediation No remediation found in references.
netapp snapmanager	All versions
CPE cpe:2.3:a:netapp:snapmanager:-:::::oracle:: cpe:2.3:a:netapp:snapmanager:-:::::sap:: Remediation No remediation found in references.
netapp solidfire	All versions
CPE cpe:2.3:a:netapp:solidfire:-:::::::* Remediation No remediation found in references.
netapp steelstore cloud integrated storage	All versions
CPE cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:::::::* Remediation No remediation found in references.
netapp storage replication adapter for clustered data ontap	All versions
CPE cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:-:::::vmware_vsphere:: Remediation No remediation found in references.
netapp symantec netbackup	All versions
CPE cpe:2.3:a:netapp:symantec_netbackup:-:::::::* Remediation No remediation found in references.
netapp vasa provider for clustered data ontap	>= 7.2
CPE cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:::::::: Remediation No remediation found in references.
netapp virtual storage console	All versions
CPE cpe:2.3:a:netapp:virtual_storage_console:-:::::vmware_vsphere:: Remediation No remediation found in references.
netapp hci storage node	All versions
CPE cpe:2.3:h:netapp:hci_storage_node:-:::::::* Remediation No remediation found in references.
nodejs node.js	>= 4.0.0, <= 4.1.2 >= 4.2.0, < 4.8.2 >= 6.0.0, <= 6.8.1 >= 6.9.0, < 6.10.2 >= 7.0.0, < 7.6.0
CPE cpe:2.3:a:nodejs:node.js:::::-:::* cpe:2.3:a:nodejs:node.js:::::lts:::* Remediation No remediation found in references.

Change History

29 change records found show changes

Date	Action	Recorded By
Jul 14, 2026	CVE Modified	siemens-SADP
Jun 17, 2026	CVE Modified	[email protected]
May 13, 2026	CVE Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Nov 7, 2023	CVE Source Update	[email protected]
Aug 16, 2022	Reanalysis	[email protected]
Jun 22, 2022	Modified Analysis	[email protected]
Jul 28, 2020	CVE Modified	[email protected]
Jul 15, 2020	CVE Modified	[email protected]
Mar 10, 2020	CVE Modified	[email protected]
Jan 30, 2020	CVE Modified	[email protected]
Jan 28, 2020	CVE Modified	[email protected]
Mar 25, 2019	CVE Modified	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 17, 2018	CVE Modified	[email protected]
Jul 19, 2018	CVE Modified	[email protected]
Jan 5, 2018	CVE Modified	[email protected]
Dec 15, 2017	CVE Modified	[email protected]
Dec 14, 2017	CVE Modified	[email protected]
Nov 10, 2017	CVE Modified	[email protected]
Oct 24, 2017	CVE Modified	[email protected]
Oct 20, 2017	CVE Modified	[email protected]
Oct 19, 2017	CVE Modified	[email protected]
Sep 27, 2017	CVE Modified	[email protected]
Jun 1, 2017	Initial Analysis	[email protected]

CVE-2016-9841 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation