CVE-2016-9842

HIGH

zlib 1.2.8 - Info Disclosure

Title source: llm

Description

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

References (30)

... and 10 more

Scores

CVSS v3 8.8
EPSS 0.1213
EPSS Percentile 93.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-1335
Status draft

Affected Products (30)

zlib/zlib < 1.2.9
opensuse/leap
opensuse/leap
opensuse/opensuse
debian/debian_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
oracle/database_server
oracle/jdk
oracle/jdk
oracle/jdk
oracle/jre
oracle/jre
oracle/jre
oracle/mysql < 5.5.61
... and 15 more

Timeline

Published May 23, 2017
Tracked Since Feb 18, 2026