CVE-2016-9842

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-9842

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9842.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-9842

Aliases

PSF-2017-4

Related

Published

2017-05-23T04:29:01Z

Modified

2024-10-12T02:20:46.153831Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

References

Affected packages

Alpine:v3.3 / zlib

Package

Name: zlib
Purl: pkg:apk/alpine/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-r0

Affected versions

1.*

1.2.3.3-r2

1.2.3.3-r3

1.2.3.3-r4

1.2.3.3-r5

1.2.3.3-r6

1.2.3.3-r7

1.2.3.4-r0

1.2.3.4-r1

1.2.3.7-r0

1.2.3.7-r1

1.2.3.9-r0

1.2.4-r0

1.2.4-r1

1.2.5-r0

1.2.5-r1

1.2.5-r2

1.2.6-r0

1.2.7-r0

1.2.7-r1

1.2.8-r0

1.2.8-r1

1.2.8-r2

Alpine:v3.4 / zlib

Package

Name: zlib
Purl: pkg:apk/alpine/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-r0

Affected versions

1.*

1.2.3.3-r2

1.2.3.3-r3

1.2.3.3-r4

1.2.3.3-r5

1.2.3.3-r6

1.2.3.3-r7

1.2.3.4-r0

1.2.3.4-r1

1.2.3.7-r0

1.2.3.7-r1

1.2.3.9-r0

1.2.4-r0

1.2.4-r1

1.2.5-r0

1.2.5-r1

1.2.5-r2

1.2.6-r0

1.2.7-r0

1.2.7-r1

1.2.8-r0

1.2.8-r1

1.2.8-r2

Alpine:v3.5 / perl

Package

Name: perl
Purl: pkg:apk/alpine/perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.24.3-r1

Affected versions

5.*

5.10.0-r0

5.10.0-r1

5.10.1-r0

5.10.1-r1

5.10.1-r2

5.12.1-r0

5.12.2-r0

5.12.2-r1

5.12.3-r0

5.14.0-r0

5.14.1-r0

5.14.2-r0

5.14.2-r1

5.16.0-r0

5.16.1-r0

5.16.2-r0

5.16.3-r0

5.18.0-r0

5.18.1-r0

5.18.2-r0

5.20.0-r0

5.20.1-r0

5.20.2-r0

5.20.2-r1

5.22.0-r0

5.22.1-r0

5.22.2-r0

5.24.0-r0

5.24.3-r0

Alpine:v3.5 / zlib

Package

Name: zlib
Purl: pkg:apk/alpine/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-r0

Affected versions

1.*

1.2.3.3-r2

1.2.3.3-r3

1.2.3.3-r4

1.2.3.3-r5

1.2.3.3-r6

1.2.3.3-r7

1.2.3.4-r0

1.2.3.4-r1

1.2.3.7-r0

1.2.3.7-r1

1.2.3.9-r0

1.2.4-r0

1.2.4-r1

1.2.5-r0

1.2.5-r1

1.2.5-r2

1.2.6-r0

1.2.7-r0

1.2.7-r1

1.2.8-r0

1.2.8-r1

1.2.8-r2

Alpine:v3.6 / perl

Package

Name: perl
Purl: pkg:apk/alpine/perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.24.3-r1

Affected versions

5.*

5.10.0-r0

5.10.0-r1

5.10.1-r0

5.10.1-r1

5.10.1-r2

5.12.1-r0

5.12.2-r0

5.12.2-r1

5.12.3-r0

5.14.0-r0

5.14.1-r0

5.14.2-r0

5.14.2-r1

5.16.0-r0

5.16.1-r0

5.16.2-r0

5.16.3-r0

5.18.0-r0

5.18.1-r0

5.18.2-r0

5.20.0-r0

5.20.1-r0

5.20.2-r0

5.20.2-r1

5.22.0-r0

5.22.1-r0

5.22.2-r0

5.24.0-r0

5.24.0-r1

5.24.0-r2

5.24.1-r0

5.24.1-r1

5.24.1-r2

5.24.3-r0

Debian:11 / rsync

Package

Name: rsync
Purl: pkg:deb/debian/rsync?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.3-6

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / rsync

Package

Name: rsync
Purl: pkg:deb/debian/rsync?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.3-6

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / rsync

Package

Name: rsync
Purl: pkg:deb/debian/rsync?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.3-6

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:11 / zlib

Package

Name: zlib
Purl: pkg:deb/debian/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.2.8.dfsg-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / zlib

Package

Name: zlib
Purl: pkg:deb/debian/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.2.8.dfsg-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / zlib

Package

Name: zlib
Purl: pkg:deb/debian/zlib?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.2.8.dfsg-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/katello/katello

Affected ranges

Type: GIT
Repo: https://github.com/katello/katello
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

2bb798cee47b5f92038137e3d7fa7f59f7a11ef6

Type: GIT
Repo: https://github.com/madler/zlib
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

e54e1299404101a5a9d0cf5e45512b543967f958

Type: GIT
Repo: https://github.com/nodejs/node
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

cea049bcf8bb0f9a6e0095dbd5dffdb14dc8f71b

Affected versions

v0.*

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.0.6

v0.1.0

v0.1.1

v0.1.10

v0.1.100

v0.1.101

v0.1.102

v0.1.103

v0.1.104

v0.1.11

v0.1.12

v0.1.13

v0.1.14

v0.1.15

v0.1.16

v0.1.17

v0.1.18

v0.1.19

v0.1.2

v0.1.20

v0.1.21

v0.1.22

v0.1.23

v0.1.24

v0.1.25

v0.1.26

v0.1.27

v0.1.28

v0.1.29

v0.1.3

v0.1.30

v0.1.31

v0.1.32

v0.1.33

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.1.9

v0.1.90

v0.1.91

v0.1.92

v0.1.93

v0.1.94

v0.1.95

v0.1.96

v0.1.97

v0.1.98

v0.1.99

v0.10.0

v0.10.1

v0.10.10

v0.10.11

v0.10.12

v0.10.13

v0.10.14

v0.10.15

v0.10.16

v0.10.17

v0.10.18

v0.10.19

v0.10.2

v0.10.20

v0.10.21

v0.10.22

v0.10.23

v0.10.24

v0.10.25

v0.10.26

v0.10.27

v0.10.28

v0.10.29

v0.10.3

v0.10.30

v0.10.31

v0.10.32

v0.10.4

v0.10.5

v0.10.6

v0.10.7

v0.10.8

v0.10.9

v0.11.0

v0.11.1

v0.11.10

v0.11.11

v0.11.12

v0.11.13

v0.11.2

v0.11.3

v0.11.4

v0.11.5

v0.11.6

v0.11.7

v0.11.8

v0.11.9

v0.2.0

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

v0.3.7

v0.3.8

v0.4.0

v0.4.1

v0.4.10

v0.4.11

v0.4.12

v0.4.2

v0.4.3

v0.4.4

v0.4.5

v0.4.6

v0.4.7

v0.4.8

v0.4.9

v0.5.0

v0.5.1

v0.5.10

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.5-rc1

v0.5.6

v0.5.7

v0.5.8

v0.5.9

v0.6.0

v0.6.1

v0.6.10

v0.6.11

v0.6.12

v0.6.13

v0.6.14

v0.6.15

v0.6.16

v0.6.17

v0.6.18

v0.6.19

v0.6.2

v0.6.20

v0.6.3

v0.6.4

v0.6.5

v0.6.6

v0.6.7

v0.6.8

v0.6.9

v0.7.0

v0.7.1

v0.7.10

v0.7.11

v0.7.12

v0.7.2

v0.7.3

v0.7.4

v0.7.5

v0.7.6

v0.7.7

v0.7.8

v0.7.9

v0.71

v0.79

v0.8

v0.8.0

v0.8.1

v0.8.10

v0.8.11

v0.8.12

v0.8.13

v0.8.14

v0.8.15

v0.8.16

v0.8.17

v0.8.18

v0.8.19

v0.8.2

v0.8.20

v0.8.21

v0.8.22

v0.8.3

v0.8.4

v0.8.5

v0.8.6

v0.8.7

v0.8.8

v0.8.9

v0.9

v0.9.0

v0.9.1

v0.9.10

v0.9.11

v0.9.12

v0.9.2

v0.9.3

v0.9.4

v0.9.5

v0.9.6

v0.9.7

v0.9.8

v0.9.9

v0.91

v0.92

v0.93

v0.94

v0.95

v0.99

v1.*

v1.0-pre

v1.0.0

v1.0.0-release

v1.0.1

v1.0.1-release

v1.0.2

v1.0.2-release

v1.0.3

v1.0.4

v1.0.5

v1.0.7

v1.0.8

v1.0.9

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.1.4

v1.2.0

v1.2.0.1

v1.2.0.2

v1.2.0.3

v1.2.0.4

v1.2.0.5

v1.2.0.6

v1.2.0.7

v1.2.0.8

v1.2.1

v1.2.1.1

v1.2.1.2

v1.2.2

v1.2.2.1

v1.2.2.2

v1.2.2.3

v1.2.2.4

v1.2.3

v1.2.3.1

v1.2.3.2

v1.2.3.3

v1.2.3.4

v1.2.3.5

v1.2.3.6

v1.2.3.7

v1.2.3.8

v1.2.3.9

v1.2.4

v1.2.4-pre1

v1.2.4-pre2

v1.2.4.1

v1.2.4.2

v1.2.4.3

v1.2.4.4

v1.2.4.5

v1.2.5

v1.2.5.1

v1.2.5.2

v1.2.5.3

v1.2.6

v1.2.6.1

v1.2.7

v1.2.7.1

v1.2.7.2

v1.2.7.3

v1.2.8

v1.3.0

v1.4.1

v1.4.2

v1.4.3

v1.5.0

v1.5.1

v1.6.0

v1.6.1

v1.6.2

v1.6.3

v1.6.4

v1.7.0

v1.7.1

v1.8.1

v2.*

v2.0.0

v2.0.1

v2.0.2

v2.1.0

v2.2.0

v2.2.1

v2.3.0

v2.3.1

v2.3.2

v2.3.3

v2.3.4

v2.4.0

v2.5.0

v3.*

v3.0.0