CVE-2016-9840

HIGH

zlib <1.2.8 - Info Disclosure

Title source: llm

Description

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

References (30)

... and 10 more

Scores

CVSS v3 8.8
EPSS 0.1300
EPSS Percentile 93.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

Status draft

Affected Products (31)

boost/boost < 1.78.0
zlib/zlib < 1.2.9
opensuse/leap
opensuse/leap
opensuse/opensuse
debian/debian_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
oracle/database_server
oracle/jdk
oracle/jdk
oracle/jdk
oracle/jre
oracle/jre
oracle/jre
... and 16 more

Timeline

Published May 23, 2017
Tracked Since Feb 18, 2026