inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-rsyncalma-upgrade-rsync-daemon | Jun 4, 2025 | Jun 2, 2025 | |
| Alpine Linux | alpine-linux-upgrade-zlibalpine-linux-upgrade-perl | Sep 20, 2017 | May 23, 2017 | |
| Apple Osx Zlib | apple-osx-upgrade-latest | Sep 26, 2017 | May 23, 2017 | |
| Centos_linux | — | centos-upgrade-java-1-6-0-ibmcentos-upgrade-java-1-6-0-ibm-democentos-upgrade-java-1-6-0-ibm-develcentos-upgrade-java-1-6-0-ibm-javacommcentos-upgrade-java-1-6-0-ibm-jdbccentos-upgrade-java-1-6-0-ibm-plugincentos-upgrade-java-1-6-0-ibm-srccentos-upgrade-java-1-7-1-ibmcentos-upgrade-java-1-7-1-ibm-democentos-upgrade-java-1-7-1-ibm-develcentos-upgrade-java-1-7-1-ibm-jdbccentos-upgrade-java-1-7-1-ibm-plugincentos-upgrade-java-1-7-1-ibm-srccentos-upgrade-java-1-8-0-ibmcentos-upgrade-java-1-8-0-ibm-democentos-upgrade-java-1-8-0-ibm-develcentos-upgrade-java-1-8-0-ibm-jdbccentos-upgrade-java-1-8-0-ibm-plugincentos-upgrade-java-1-8-0-ibm-srccentos-upgrade-satellitecentos-upgrade-satellite-branding | Aug 28, 2019 | May 23, 2017 |
| Debian | debian-upgrade-rsyncdebian-upgrade-zlib | Mar 25, 2019 | May 23, 2017 | |
| Dell Powerstore Dsa2025429 | dell-powerstoreos-upgrade-latest | Dec 3, 2025 | Dec 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Feb 21, 2025 | |
| Freebsd | freebsd-upgrade-package-rsync | Aug 17, 2020 | Aug 16, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-rsyncgentoo-linux-upgrade-sys-libs-zlib | Oct 30, 2017 | May 23, 2017 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-syslinuxhuawei-euleros-2_0_sp10-upgrade-syslinux-nonlinux | Nov 3, 2022 | May 23, 2017 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-syslinuxhuawei-euleros-2_0_sp11-upgrade-syslinux-nonlinux | Jan 10, 2024 | May 23, 2017 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-zlibhuawei-euleros-2_0_sp5-upgrade-zlib-devel | Dec 27, 2019 | May 23, 2017 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-mariadbhuawei-euleros-2_0_sp8-upgrade-mariadb-commonhuawei-euleros-2_0_sp8-upgrade-mariadb-devel | Oct 11, 2022 | May 23, 2017 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-syslinuxhuawei-euleros-2_0_sp9-upgrade-syslinux-nonlinux | Nov 15, 2022 | May 23, 2017 | |
| Ibm Aix | ibm-aix-java_apr2017_advisory | Nov 6, 2017 | May 23, 2017 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Aug 22, 2025 | |
| Oracle Mysql | mysql-upgrade-5_5_62mysql-upgrade-5_6_42mysql-upgrade-5_7_24mysql-upgrade-8_0_13 | Apr 21, 2026 | Apr 21, 2026 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-zlib-1-2-11-0-175-3-20-0-2-0oracle-solaris-11-4-upgrade-network-rsync-3-1-3-11-4-3-0-1-3-0 | May 29, 2017 | May 23, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-miniziporacle-linux-upgrade-minizip-develoracle-linux-upgrade-rsyncoracle-linux-upgrade-rsync-daemonoracle-linux-upgrade-zliboracle-linux-upgrade-zlib-develoracle-linux-upgrade-zlib-static | Jun 4, 2025 | Sep 22, 2016 |
| Redhat_linux | redhat-upgrade-minizipredhat-upgrade-minizip-develredhat-upgrade-rsyncredhat-upgrade-rsync-daemonredhat-upgrade-rsync-debuginforedhat-upgrade-rsync-debugsourceredhat-upgrade-zlibredhat-upgrade-zlib-debuginforedhat-upgrade-zlib-develredhat-upgrade-zlib-static | May 10, 2017 | Dec 20, 2016 | |
| Rocky_linux | rocky-upgrade-rsyncrocky-upgrade-rsync-debuginforocky-upgrade-rsync-debugsource | Jul 31, 2025 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-java-1_6_0-ibmsuse-upgrade-java-1_6_0-ibm-alsasuse-upgrade-java-1_6_0-ibm-develsuse-upgrade-java-1_6_0-ibm-fontssuse-upgrade-java-1_6_0-ibm-jdbcsuse-upgrade-java-1_6_0-ibm-pluginsuse-upgrade-java-1_7_0-ibmsuse-upgrade-java-1_7_0-ibm-alsasuse-upgrade-java-1_7_0-ibm-develsuse-upgrade-java-1_7_0-ibm-jdbcsuse-upgrade-java-1_7_0-ibm-pluginsuse-upgrade-java-1_7_0-openjdksuse-upgrade-java-1_7_0-openjdk-demosuse-upgrade-java-1_7_0-openjdk-develsuse-upgrade-java-1_7_0-openjdk-headlesssuse-upgrade-java-1_7_1-ibmsuse-upgrade-java-1_7_1-ibm-alsasuse-upgrade-java-1_7_1-ibm-develsuse-upgrade-java-1_7_1-ibm-jdbcsuse-upgrade-java-1_7_1-ibm-pluginsuse-upgrade-java-1_8_0-ibmsuse-upgrade-java-1_8_0-ibm-alsasuse-upgrade-java-1_8_0-ibm-develsuse-upgrade-java-1_8_0-ibm-pluginsuse-upgrade-java-1_8_0-openjdksuse-upgrade-java-1_8_0-openjdk-demosuse-upgrade-java-1_8_0-openjdk-develsuse-upgrade-java-1_8_0-openjdk-headlesssuse-upgrade-libz1suse-upgrade-libz1-32bitsuse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-imagesuse-upgrade-sles12sp2-docker-imagesuse-upgrade-zlibsuse-upgrade-zlib-32bitsuse-upgrade-zlib-develsuse-upgrade-zlib-devel-32bitsuse-upgrade-zlib-devel-staticsuse-upgrade-zlib-x86 | Dec 21, 2016 | Dec 20, 2016 |
| Ubuntu | ubuntu-pro-upgrade-klibc-utilsubuntu-pro-upgrade-libklibcubuntu-upgrade-klibc-utilsubuntu-upgrade-lib32z1ubuntu-upgrade-lib64z1ubuntu-upgrade-libklibcubuntu-upgrade-libx32z1ubuntu-upgrade-rsyncubuntu-upgrade-zlib1g | Jan 23, 2020 | Dec 20, 2016 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub