inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0 Patch, Third Party Advisory
- https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0 Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.8 · boost, zlib, opensuseNVD modified 2026-10-08 22:16
Affected (CPE criteria) 31
cpe:2.3:a:boost:boost:*:*:*:*:*:*:*:*cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*
References 61
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/12/05/21 Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html Third Party Advisory
- http://www.securityfocus.com/bid/95131 Broken Link
- http://www.securitytracker.com/id/1039427 Broken Link
- https://access.redhat.com/errata/RHSA-2017:1220 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1221 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1222 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2999 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3046 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3047 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3453 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1402345 Issue Tracking, Third Party Advisory
- https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0 Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201701-56 Third Party Advisory
- https://security.gentoo.org/glsa/202007-54 Third Party Advisory
- https://support.apple.com/HT208112 Third Party Advisory
- https://support.apple.com/HT208113 Third Party Advisory
- https://support.apple.com/HT208115 Third Party Advisory
- https://support.apple.com/HT208144 Third Party Advisory
- https://usn.ubuntu.com/4246-1/ Third Party Advisory
- https://usn.ubuntu.com/4292-1/ Third Party Advisory
- https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib Third Party Advisory
- https://wiki.mozilla.org/images/0/09/Zlib-report.pdf Broken Link
- https://www.oracle.com/security-alerts/cpujul2020.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/12/05/21 Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html Third Party Advisory
- http://www.securityfocus.com/bid/95131 Broken Link
- http://www.securitytracker.com/id/1039427 Broken Link
- https://access.redhat.com/errata/RHSA-2017:1220 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1221 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1222 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2999 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3046 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3047 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3453 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1402345 Issue Tracking, Third Party Advisory
- https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0 Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201701-56 Third Party Advisory
- https://security.gentoo.org/glsa/202007-54 Third Party Advisory
- https://support.apple.com/HT208112 Third Party Advisory
- https://support.apple.com/HT208113 Third Party Advisory
- https://support.apple.com/HT208115 Third Party Advisory
- https://support.apple.com/HT208144 Third Party Advisory
- https://usn.ubuntu.com/4246-1/ Third Party Advisory
- https://usn.ubuntu.com/4292-1/ Third Party Advisory
- https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib Third Party Advisory
- https://wiki.mozilla.org/images/0/09/Zlib-report.pdf Broken Link
- https://www.oracle.com/security-alerts/cpujul2020.html Third Party Advisory