inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
2017-05-23T04:29:01.743
2025-04-20T01:37:25.860
Deferred
CVSSv3.1: 9.8 (CRITICAL)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | zlib | zlib | < 1.2.9 | Yes |
| Operating System | opensuse | leap | 42.1 | Yes |
| Operating System | opensuse | leap | 42.2 | Yes |
| Operating System | opensuse | opensuse | 13.2 | Yes |
| Operating System | debian | debian_linux | 8.0 | Yes |
| Operating System | canonical | ubuntu_linux | 16.04 | Yes |
| Operating System | canonical | ubuntu_linux | 18.04 | Yes |
| Application | oracle | database_server | 18c | Yes |
| Application | oracle | jdk | 1.6.0 | Yes |
| Application | oracle | jdk | 1.7.0 | Yes |
| Application | oracle | jdk | 1.8.0 | Yes |
| Application | oracle | jre | 1.6.0 | Yes |
| Application | oracle | jre | 1.7.0 | Yes |
| Application | oracle | jre | 1.8.0 | Yes |
| Application | oracle | mysql | ≤ 5.5.61 | Yes |
| Application | oracle | mysql | ≤ 5.6.41 | Yes |
| Application | oracle | mysql | ≤ 5.7.23 | Yes |
| Application | oracle | mysql | ≤ 8.0.12 | Yes |
| Application | redhat | satellite | 5.8 | Yes |
| Operating System | redhat | enterprise_linux_desktop | 6.0 | Yes |
| Operating System | redhat | enterprise_linux_desktop | 7.0 | Yes |
| Operating System | redhat | enterprise_linux_eus | 7.4 | Yes |
| Operating System | redhat | enterprise_linux_eus | 7.5 | Yes |
| Operating System | redhat | enterprise_linux_server | 6.0 | Yes |
| Operating System | redhat | enterprise_linux_server | 7.0 | Yes |
| Operating System | redhat | enterprise_linux_workstation | 6.0 | Yes |
| Operating System | redhat | enterprise_linux_workstation | 7.0 | Yes |
| Operating System | apple | iphone_os | < 11 | Yes |
| Operating System | apple | mac_os_x | < 10.13.0 | Yes |
| Operating System | apple | tvos | < 11.0 | Yes |
| Operating System | apple | watchos | < 4 | Yes |
| Application | netapp | active_iq_unified_manager | ≥ 7.3 | Yes |
| Application | netapp | active_iq_unified_manager | ≥ 9.5 | Yes |
| Application | netapp | cloud_backup | - | Yes |
| Application | netapp | e-series_santricity_management | - | Yes |
| Application | netapp | e-series_santricity_management | - | Yes |
| Application | netapp | e-series_santricity_management | - | Yes |
| Application | netapp | e-series_santricity_os_controller | ≤ 11.70.1 | Yes |
| Application | netapp | e-series_santricity_storage_manager | - | Yes |
| Application | netapp | e-series_santricity_web_services | - | Yes |
| Application | netapp | oncommand_balance | - | Yes |
| Application | netapp | oncommand_insight | - | Yes |
| Application | netapp | oncommand_performance_manager | - | Yes |
| Application | netapp | oncommand_shift | - | Yes |
| Application | netapp | oncommand_unified_manager | ≤ 7.1 | Yes |
| Application | netapp | oncommand_unified_manager | ≤ 7.1 | Yes |
| Application | netapp | oncommand_unified_manager | - | Yes |
| Application | netapp | oncommand_workflow_automation | - | Yes |
| Application | netapp | snapmanager | - | Yes |
| Application | netapp | snapmanager | - | Yes |
| Application | netapp | solidfire | - | Yes |
| Application | netapp | steelstore_cloud_integrated_storage | - | Yes |
| Application | netapp | storage_replication_adapter_for_clustered_data_ontap | - | Yes |
| Application | netapp | symantec_netbackup | - | Yes |
| Application | netapp | vasa_provider_for_clustered_data_ontap | ≥ 7.2 | Yes |
| Application | netapp | virtual_storage_console | - | Yes |
| Hardware | netapp | hci_storage_node | - | Yes |
| Application | nodejs | node.js | ≤ 4.1.2 | Yes |
| Application | nodejs | node.js | < 4.8.2 | Yes |
| Application | nodejs | node.js | ≤ 6.8.1 | Yes |
| Application | nodejs | node.js | < 6.10.2 | Yes |
| Application | nodejs | node.js | < 7.6.0 | Yes |