CVE-2016-9840
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-9840
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9840.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2016-9840
- Aliases
- Downstream
- Related
- Published
- 2017-05-23T04:29:01.667Z
- Modified
- 2025-11-14T04:55:12.422661Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
- References
-
- http://www.securityfocus.com/bid/95131
- http://www.securitytracker.com/id/1039427
- https://wiki.mozilla.org/images/0/09/Zlib-report.pdf
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
- http://www.openwall.com/lists/oss-security/2016/12/05/21
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- https://access.redhat.com/errata/RHSA-2017:1220
- https://access.redhat.com/errata/RHSA-2017:1221
- https://access.redhat.com/errata/RHSA-2017:1222
- https://access.redhat.com/errata/RHSA-2017:2999
- https://access.redhat.com/errata/RHSA-2017:3046
- https://access.redhat.com/errata/RHSA-2017:3047
- https://access.redhat.com/errata/RHSA-2017:3453
- https://bugzilla.redhat.com/show_bug.cgi?id=1402345
- https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0
- https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html
- https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html
- https://security.gentoo.org/glsa/201701-56
- https://security.gentoo.org/glsa/202007-54
- https://support.apple.com/HT208112
- https://support.apple.com/HT208113
- https://support.apple.com/HT208115
- https://support.apple.com/HT208144
- https://usn.ubuntu.com/4246-1/
- https://usn.ubuntu.com/4292-1/
- https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib
- https://www.oracle.com/security-alerts/cpujul2020.html
Affected packages
Git / github.com/madler/zlib
Affected ranges
- Type
- GIT
- Repo
- https://github.com/madler/zlib
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
v0.*
v0.71
v0.79
v0.8
v0.9
v0.91
v0.92
v0.93
v0.94
v0.95
v0.99
v1.*
v1.0-pre
v1.0.1
v1.0.2
v1.0.4
v1.0.5
v1.0.7
v1.0.8
v1.0.9
v1.1.0
v1.1.1
v1.1.2
v1.1.3
v1.1.4
v1.2.0
v1.2.0.1
v1.2.0.2
v1.2.0.3
v1.2.0.4
v1.2.0.5
v1.2.0.6
v1.2.0.7
v1.2.0.8
v1.2.1
v1.2.1.1
v1.2.1.2
v1.2.2
v1.2.2.1
v1.2.2.2
v1.2.2.3
v1.2.2.4
v1.2.3
v1.2.3.1
v1.2.3.2
v1.2.3.3
v1.2.3.4
v1.2.3.5
v1.2.3.6
v1.2.3.7
v1.2.3.8
v1.2.3.9
v1.2.4
v1.2.4-pre1
v1.2.4-pre2
v1.2.4.1
v1.2.4.2
v1.2.4.3
v1.2.4.4
v1.2.4.5
v1.2.5
v1.2.5.1
v1.2.5.2
v1.2.5.3
v1.2.6
v1.2.6.1
v1.2.7
v1.2.7.1
v1.2.7.2
v1.2.7.3
v1.2.8
Database specific
vanir_signatures
[
{
"digest": {
"line_hashes": [
"79922679965347110745734698915726632467",
"126813590579008290988718395478645426206",
"79466596218979115230947295705213292393",
"94908522895392918179330397374303322654",
"294878633993268850114778284316336215255",
"45629984547848664636655317045532794035",
"116847805198357221433888060203111502041",
"312136188528093063192158590599941715254",
"54270934100445027986781242788444508427",
"151244602054367791046613768817959193697",
"182299172507133003738586974100950863836",
"287898435384129613401554161468337708342",
"165985360513289330686611297477254368814",
"275321615747459570033077014648560830547",
"70348488676879259643634764804252428984",
"295378974609983581304343450587863375323",
"281587176543147940050594107912300113027",
"291357719346107022770774239922984576091",
"5363548009795485230402450341246148900",
"283614953693141663496762238152828872207",
"317432809742657110140968209661147809307",
"223316103943005991916374936548405181986",
"94843072090250528147617254384594442333",
"207902361503503787683588524899448874944",
"128236543350826831504384697314118593786",
"17736424622891055567985379507175510801",
"99172734391354959660529588307945130416",
"168640863699306485229530538896427329407",
"22889291697561298601158473495398811020",
"99489743347852376068360184828245211593"
],
"threshold": 0.9
},
"target": {
"file": "inftrees.c"
},
"signature_type": "Line",
"id": "CVE-2016-9840-c5f344c4",
"signature_version": "v1",
"source": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0",
"deprecated": false
}
]