CVE-2016-9841

—

CVSS 3.1

9.8 critical

EPSS

8%p94

Published

May 23, 2017 (May 23, 2017)

Modified

Jul 14, 2026

Description

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Vendors: zlib opensuse debian canonical oracle redhat apple netapp nodejs
Products: zlib, leap, opensuse, debian linux, ubuntu linux, database server, jdk, jre, mysql, satellite, enterprise linux desktop, enterprise linux eus
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.5%)

In the news1 stories

Dozens of Vulnerable NuGet Packages Allow Attackers to Target .NET Platform

The Hacker NewsJul 8, 07:40 UTC · Jul 8, 2021Vulnerability in the wildCVE-2021-3331 CVE-2016-9840 CVE-2016-9841+2 CVEs

60