CVE-2016-9842

Description

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
13.694

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Oracle 18cWindows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.2.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.2.1Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.3.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.3.1Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1Windows
Multiple Vulnerabilities are affected in IBM MQ 8.0.0.6Windows
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.6 - Reboot AutomaticallyMac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.6 Combo Update - Reboot AutomaticallyMac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.5 - Reboot AutomaticallyMac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.4 - Reboot AutomaticallyMac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.4 Combo Update - Reboot AutomaticallyMac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.3Mac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.3 Combo UpdateMac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.2Mac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.2 Combo UpdateMac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.1Mac
Multiple vulnerabilities are fixed in Security Update 2017-001 macOS High Sierra v10.13.1Mac
Multiple vulnerabilities are fixed in Security Update 2017-001 macOS High Sierra v10.13Mac
(RHSA-2017:3267) Critical: java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.5.5-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:3267) Critical: java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.5.5-1jpp.1.el6_9.x86_64.rpmLinux
SUSE-SU-2017:0003-1(SUSE Linux Enterprise Desktop 12-SP2 ) libz1-1.2.8-11.1.x86_64.rpmLinux
SUSE-SU-2017:0003-1(SUSE Linux Enterprise Desktop 12-SP2 ) libz1-32bit-1.2.8-11.1.x86_64.rpmLinux
SUSE-SU-2017:0003-1(SUSE Linux Enterprise Desktop 12-SP2 ) libz1-debuginfo-1.2.8-11.1.x86_64.rpmLinux
SUSE-SU-2017:0003-1(SUSE Linux Enterprise Desktop 12-SP2 ) libz1-debuginfo-32bit-1.2.8-11.1.x86_64.rpmLinux
SUSE-SU-2017:0003-1(SUSE Linux Enterprise Desktop 12-SP2 ) zlib-debugsource-1.2.8-11.1.x86_64.rpmLinux
SUSE-SU-2017:0003-1(SUSE Linux Enterprise Desktop 12-SP2 ) zlib-devel-1.2.8-11.1.x86_64.rpmLinux
SUSE-SU-2017:0004-1(SUSE Linux Enterprise Desktop 12-SP1 ) libz1-1.2.8-6.3.1.x86_64.rpmLinux
SUSE-SU-2017:0004-1(SUSE Linux Enterprise Desktop 12-SP1 ) libz1-32bit-1.2.8-6.3.1.x86_64.rpmLinux
SUSE-SU-2017:0004-1(SUSE Linux Enterprise Desktop 12-SP1 ) libz1-debuginfo-1.2.8-6.3.1.x86_64.rpmLinux
SUSE-SU-2017:0004-1(SUSE Linux Enterprise Desktop 12-SP1 ) libz1-debuginfo-32bit-1.2.8-6.3.1.x86_64.rpmLinux
SUSE-SU-2017:0004-1(SUSE Linux Enterprise Desktop 12-SP1 ) zlib-debugsource-1.2.8-6.3.1.x86_64.rpmLinux
SUSE-SU-2017:1385-1(SUSE Linux Enterprise Server 12-SP1 ) java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64.rpmLinux
SUSE-SU-2017:1385-1(SUSE Linux Enterprise Server 12-SP1 ) java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64.rpmLinux
SUSE-SU-2017:1385-1(SUSE Linux Enterprise Server 12-SP1 ) java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64.rpmLinux
SUSE-SU-2017:1385-1(SUSE Linux Enterprise Server 12-SP1 ) java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64.rpmLinux
SUSE-SU-2017:1386-1(SUSE Linux Enterprise Server 12-SP1 ) java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64.rpmLinux
SUSE-SU-2017:1386-1(SUSE Linux Enterprise Server 12-SP1 ) java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64.rpmLinux
SUSE-SU-2017:1386-1(SUSE Linux Enterprise Server 12-SP1 ) java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64.rpmLinux
SUSE-SU-2016:3209-1(SUSE Linux Enterprise Server 11-SP4 ) zlib-1.2.7-0.14.1.x86_64.rpmLinux
SUSE-SU-2016:3209-1(SUSE Linux Enterprise Server 11-SP4 ) zlib-32bit-1.2.7-0.14.1.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.4.5-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.4.5-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.4.5-1jpp.1.el7_3.i686.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.4.5-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.4.5-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.4.5-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.4.5-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.4.5-1jpp.1.el7_3.i686.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.4.5-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.4.5-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.4.5-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.4.5-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.4.5-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.4.5-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1220) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-1.7.1.4.5-1jpp.1.el7_3.i686.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-1.7.1.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-1.7.1.4.5-1jpp.2.el6_9.i686.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-1.7.1.4.5-1jpp.2.el6_9.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-demo-1.7.1.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-demo-1.7.1.4.5-1jpp.2.el6_9.i686.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-demo-1.7.1.4.5-1jpp.2.el6_9.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-devel-1.7.1.4.5-1jpp.1.el7_3.i686.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-devel-1.7.1.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-devel-1.7.1.4.5-1jpp.2.el6_9.i686.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-devel-1.7.1.4.5-1jpp.2.el6_9.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-jdbc-1.7.1.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-jdbc-1.7.1.4.5-1jpp.2.el6_9.i686.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-jdbc-1.7.1.4.5-1jpp.2.el6_9.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-plugin-1.7.1.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-plugin-1.7.1.4.5-1jpp.2.el6_9.i686.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-plugin-1.7.1.4.5-1jpp.2.el6_9.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-src-1.7.1.4.5-1jpp.1.el7_3.x86_64.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-src-1.7.1.4.5-1jpp.2.el6_9.i686.rpmLinux
(RHSA-2017:1221) java-1.7.1-ibm security update java-1.7.1-ibm-src-1.7.1.4.5-1jpp.2.el6_9.x86_64.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-1.6.0.16.45-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-1.6.0.16.45-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-demo-1.6.0.16.45-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-demo-1.6.0.16.45-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-devel-1.6.0.16.45-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-devel-1.6.0.16.45-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-javacomm-1.6.0.16.45-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-javacomm-1.6.0.16.45-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-jdbc-1.6.0.16.45-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-jdbc-1.6.0.16.45-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-plugin-1.6.0.16.45-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-plugin-1.6.0.16.45-1jpp.1.el6_9.x86_64.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-src-1.6.0.16.45-1jpp.1.el6_9.i686.rpmLinux
(RHSA-2017:1222) java-1.6.0-ibm security update java-1.6.0-ibm-src-1.6.0.16.45-1jpp.1.el6_9.x86_64.rpmLinux
Lossless data-compression library (USN-4246-1) zlib1g_1.2.8.dfsg-2ubuntu4.3_i386.debLinux
Lossless data-compression library (USN-4246-1) zlib1g_1.2.8.dfsg-2ubuntu4.3_amd64.debLinux
Lossless data-compression library (USN-4246-1) lib32z1_1.2.8.dfsg-2ubuntu4.3_amd64.debLinux
Lossless data-compression library (USN-4246-1) lib64z1_1.2.8.dfsg-2ubuntu4.3_i386.debLinux
Lossless data-compression library (USN-4246-1) libx32z1_1.2.8.dfsg-2ubuntu4.3_i386.debLinux
Lossless data-compression library (USN-4246-1) libx32z1_1.2.8.dfsg-2ubuntu4.3_amd64.debLinux
fast, versatile, remote (and local) file-copying tool (USN-4292-1) rsync_3.1.1-3ubuntu1.3_i386.debLinux
fast, versatile, remote (and local) file-copying tool (USN-4292-1) rsync_3.1.1-3ubuntu1.3_amd64.debLinux
fast, versatile, remote (and local) file-copying tool (USN-4292-1) rsync_3.1.2-2.1ubuntu1.1_i386.debLinux
fast, versatile, remote (and local) file-copying tool (USN-4292-1) rsync_3.1.2-2.1ubuntu1.1_amd64.debLinux
CVE-2016-9842NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-601562macOS High Sierra 10.13.6 - Reboot Automatically
PATCH-601563macOS High Sierra 10.13.6 Combo Update - Reboot Automatically
PATCH-601563macOS High Sierra 10.13.6 Combo Update - Reboot Automatically
PATCH-601562macOS High Sierra 10.13.6 - Reboot Automatically
PATCH-601563macOS High Sierra 10.13.6 Combo Update - Reboot Automatically
PATCH-601562macOS High Sierra 10.13.6 - Reboot Automatically
PATCH-601563macOS High Sierra 10.13.6 Combo Update - Reboot Automatically
PATCH-601562macOS High Sierra 10.13.6 - Reboot Automatically
PATCH-601563macOS High Sierra 10.13.6 Combo Update - Reboot Automatically
PATCH-601562macOS High Sierra 10.13.6 - Reboot Automatically
PATCH-601312Security Update 2017-001 macOS High Sierra v10.13.1
PATCH-601345Security Update 2017-001 macOS High Sierra v10.13

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234