The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
2017-05-23T04:29:01.900
2025-04-20T01:37:25.860
Deferred
CVSSv3.1: 9.8 (CRITICAL)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | zlib | zlib | < 1.2.9 | Yes |
| Operating System | opensuse | leap | 42.1 | Yes |
| Operating System | opensuse | leap | 42.2 | Yes |
| Operating System | opensuse | opensuse | 13.2 | Yes |
| Operating System | debian | debian_linux | 8.0 | Yes |
| Operating System | canonical | ubuntu_linux | 16.04 | Yes |
| Operating System | canonical | ubuntu_linux | 18.04 | Yes |
| Application | oracle | database_server | 18c | Yes |
| Application | oracle | jdk | 1.6.0 | Yes |
| Application | oracle | jdk | 1.7.0 | Yes |
| Application | oracle | jdk | 1.8.0 | Yes |
| Application | oracle | jre | 1.6.0 | Yes |
| Application | oracle | jre | 1.7.0 | Yes |
| Application | oracle | jre | 1.8.0 | Yes |
| Application | oracle | mysql | ≤ 5.5.61 | Yes |
| Application | oracle | mysql | ≤ 5.6.41 | Yes |
| Application | oracle | mysql | ≤ 5.7.23 | Yes |
| Application | oracle | mysql | ≤ 8.0.12 | Yes |
| Application | redhat | satellite | 5.8 | Yes |
| Operating System | redhat | enterprise_linux_desktop | 6.0 | Yes |
| Operating System | redhat | enterprise_linux_desktop | 7.0 | Yes |
| Operating System | redhat | enterprise_linux_eus | 7.4 | Yes |
| Operating System | redhat | enterprise_linux_eus | 7.5 | Yes |
| Operating System | redhat | enterprise_linux_server | 6.0 | Yes |
| Operating System | redhat | enterprise_linux_server | 7.0 | Yes |
| Operating System | redhat | enterprise_linux_workstation | 6.0 | Yes |
| Operating System | redhat | enterprise_linux_workstation | 7.0 | Yes |
| Operating System | apple | iphone_os | < 11 | Yes |
| Operating System | apple | mac_os_x | < 10.13.0 | Yes |
| Operating System | apple | tvos | < 11.0 | Yes |
| Operating System | apple | watchos | < 4 | Yes |
| Application | netapp | active_iq_unified_manager | ≥ 7.3 | Yes |
| Application | netapp | active_iq_unified_manager | ≥ 9.5 | Yes |
| Application | netapp | oncommand_insight | - | Yes |
| Application | netapp | oncommand_workflow_automation | - | Yes |
| Application | netapp | snapcenter | - | Yes |
| Application | mariadb | mariadb | < 5.5.62 | Yes |
| Application | mariadb | mariadb | < 10.0.37 | Yes |
| Application | mariadb | mariadb | < 10.1.37 | Yes |
| Application | mariadb | mariadb | < 10.2.19 | Yes |
| Application | mariadb | mariadb | < 10.3.11 | Yes |
| Application | nodejs | node.js | ≤ 4.1.2 | Yes |
| Application | nodejs | node.js | < 4.8.2 | Yes |
| Application | nodejs | node.js | ≤ 6.8.1 | Yes |
| Application | nodejs | node.js | < 6.10.2 | Yes |
| Application | nodejs | node.js | < 7.6.0 | Yes |