ANCHORE-2016-9842

ANCHORE-2016-9842 PUBLISHED

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Affected Products

Vendor	Product	Versions
madler	zlib	1.2.3.4, 1.2.3.4, 1.2.3.4
Node.js	Node.js	4.0.0, 6.0.0, 7.0.0
Oracle Corporation	MySQL Server	8, 5.5.0, 5.6.0
Oracle Corporation	OpenJDK	1.7, 8, 8
Oracle Corporation	Java SE	6, 1.7, 7

Timeline

May 23, 2017 CVE Published
Aug 6, 2024 CVE Updated
Mar 13, 2026 Distribution Patch
Mar 13, 2026 Distribution Patch
Mar 13, 2026 Distribution Patch
Mar 13, 2026 Distribution Patch
Mar 13, 2026 Distribution Patch
Mar 13, 2026 Distribution Patch
Mar 13, 2026 Distribution Patch

References

http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html url
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html url
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html url
http://www.openwall.com/lists/oss-security/2016/12/05/21 url
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html url
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html url
http://www.securityfocus.com/bid/95131 url
http://www.securitytracker.com/id/1039427 url
https://access.redhat.com/errata/RHSA-2017:1220 url
https://access.redhat.com/errata/RHSA-2017:1221 url
https://access.redhat.com/errata/RHSA-2017:1222 url
https://access.redhat.com/errata/RHSA-2017:2999 url
https://access.redhat.com/errata/RHSA-2017:3046 url
https://access.redhat.com/errata/RHSA-2017:3047 url
https://access.redhat.com/errata/RHSA-2017:3453 url
https://bugzilla.redhat.com/show_bug.cgi?id=1402348 url
https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958 url
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html url
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html url
https://security.gentoo.org/glsa/201701-56 url

…and 10 more

Open in Interactive Console →