inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rsync-daemonUpgrade rsync | Jun 4, 2025 | Jun 2, 2025 |
| Alpine Linux | — | Upgrade perlUpgrade zlib | Sep 20, 2017 | May 23, 2017 |
| Apple Osx Zlib | — | Upgrade macOS to the latest version | Sep 26, 2017 | May 23, 2017 |
| Centos_linux | — | Upgrade java-1.7.1-ibmUpgrade satellite-brandingUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-pluginUpgrade satelliteUpgrade java-1.8.0-ibm-develUpgrade java-1.6.0-ibm-srcUpgrade java-1.6.0-ibm-develUpgrade java-1.6.0-ibm-javacommUpgrade java-1.6.0-ibm-jdbcUpgrade java-1.6.0-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-demoUpgrade java-1.6.0-ibm-pluginUpgrade java-1.6.0-ibm-demoUpgrade java-1.8.0-ibm-src | Aug 28, 2019 | May 23, 2017 |
| Debian | — | Upgrade rsyncUpgrade zlib | Mar 25, 2019 | May 23, 2017 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 21, 2025 |
| Freebsd | — | Upgrade rsync | Aug 17, 2020 | Aug 16, 2020 |
| Gentoo Linux | — | Upgrade sys-libs/zlib.Upgrade net-misc/rsync. | Oct 30, 2017 | May 23, 2017 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 3, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Jan 10, 2024 | May 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade zlibUpgrade zlib-devel | Dec 27, 2019 | May 23, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadbUpgrade mariadb-devel | Oct 11, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 15, 2022 | May 23, 2017 |
| Ibm Aix | — | Apply the fix or workaround for java_apr2017_advisory | Nov 6, 2017 | May 23, 2017 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.5.62Upgrade to Oracle MySQL version 5.7.24Upgrade to Oracle MySQL version 8.0.13Upgrade to Oracle MySQL version 5.6.42 | Apr 21, 2026 | Apr 21, 2026 |
| Oracle Solaris | — | Upgrade network/rsync to version 3.1.3-11.4.3.0.1.3.0 on Solaris 11.4Upgrade library/zlib to version 1.2.11-0.175.3.20.0.2.0 on Solaris 11.3 | May 29, 2017 | May 23, 2017 |
| Oracle_linux | — | Upgrade zlib-staticUpgrade rsync-daemonUpgrade minizipUpgrade zlib-develUpgrade minizip-develUpgrade rsyncUpgrade zlib | Jun 4, 2025 | Sep 22, 2016 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Sep 22, 2016 |
| Redhat_linux | — | Upgrade rsync-debugsourceUpgrade minizipUpgrade rsyncUpgrade rsync-debuginfoUpgrade minizip-develUpgrade zlib-develUpgrade zlibUpgrade zlib-debuginfoUpgrade rsync-daemonUpgrade zlib-static | May 10, 2017 | Dec 20, 2016 |
| Rocky_linux | — | Upgrade rsyncUpgrade rsync-debuginfoUpgrade rsync-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade java-1_7_0-ibm-develUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_0-ibm-alsaUpgrade sles12sp1-docker-imageUpgrade zlib-32bitUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibmUpgrade sles12sp2-docker-imageUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_0-ibm-pluginUpgrade zlib-devel-staticUpgrade java-1_6_0-ibm-pluginUpgrade libz1-32bitUpgrade java-1_7_1-ibmUpgrade java-1_7_0-openjdk-demoUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_8_0-ibm-alsaUpgrade zlib-develUpgrade java-1_8_0-openjdk-develUpgrade sles12-docker-imageUpgrade java-1_8_0-openjdk-demoUpgrade java-1_6_0-ibm-fontsUpgrade java-1_7_0-openjdk-develUpgrade java-1_6_0-ibm-alsaUpgrade zlib-devel-32bitUpgrade java-1_7_0-ibmUpgrade java-1_8_0-ibm-pluginUpgrade java-1_6_0-ibm-develUpgrade java-1_7_0-openjdk-headlessUpgrade zlibUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_6_0-ibmUpgrade java-1_8_0-ibm-develUpgrade zlib-x86Upgrade java-1_8_0-openjdkUpgrade java-1_7_0-openjdkUpgrade libz1 | Dec 21, 2016 | Dec 20, 2016 |
| Ubuntu | — | Upgrade zlib1gUpgrade klibc-utils (Ubuntu Pro)Upgrade lib64z1Upgrade libklibcUpgrade lib32z1Upgrade libklibc (Ubuntu Pro)Upgrade klibc-utilsUpgrade rsyncUpgrade libx32z1 | Jan 23, 2020 | Dec 20, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub