inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perlUpgrade zlib | Sep 20, 2017 | May 23, 2017 |
| Apple Osx Zlib | — | Upgrade macOS to the latest version | Sep 26, 2017 | May 23, 2017 |
| Azul Zulu | — | Apply Azul Zulu JDK 9 installer 9.0.1 (JDK 9.0.1, PSU) (short-term support); migrate to JDK 11 (LTS)Apply legacy security update: Azul Zulu JDK 7 installer 7.21 (JDK 7u161, quarterly CPU) — Azul Legacy Production SupportApply legacy security update: Azul Zulu JDK 6 installer 6.18 (JDK 6u99, quarterly CPU) — Azul Legacy Production SupportUpgrade to Azul Zulu JDK 8 installer 8.25 (JDK 8u152, quarterly CPU) (LTS stream) | May 23, 2017 | May 23, 2017 |
| Centos_linux | — | Upgrade java-1.6.0-ibm-jdbcUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.6.0-ibm-javacommUpgrade java-1.7.1-ibm-pluginUpgrade java-1.7.1-ibm-develUpgrade java-1.6.0-ibm-pluginUpgrade java-1.6.0-ibm-srcUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibmUpgrade java-1.6.0-ibm-demoUpgrade java-1.6.0-ibm-develUpgrade java-1.7.1-ibm-jdbcUpgrade satellite-brandingUpgrade java-1.6.0-ibmUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-demoUpgrade satellite | Aug 28, 2019 | May 23, 2017 |
| Debian | — | Upgrade zlibUpgrade rsync | Mar 25, 2019 | May 23, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 21, 2025 |
| Freebsd | — | Upgrade rsync | Aug 17, 2020 | Aug 16, 2020 |
| Gentoo Linux | — | Upgrade sys-libs/zlib.Upgrade net-misc/rsync. | Oct 30, 2017 | May 23, 2017 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 3, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Jan 10, 2024 | May 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade zlibUpgrade zlib-devel | Dec 27, 2019 | May 23, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Oct 11, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 15, 2022 | May 23, 2017 |
| Ibm Aix | — | Apply the fix or workaround for java_apr2017_advisory | Nov 6, 2017 | May 23, 2017 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 18, 2017 | May 23, 2017 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.6.42Upgrade to Oracle MySQL version 5.7.24Upgrade to Oracle MySQL version 5.5.62Upgrade to Oracle MySQL version 8.0.13 | Apr 21, 2026 | Apr 21, 2026 |
| Oracle Solaris | — | Upgrade library/zlib to version 1.2.11-0.175.3.20.0.2.0 on Solaris 11.3Upgrade network/rsync to version 3.1.3-11.4.3.0.1.3.0 on Solaris 11.4 | May 29, 2017 | May 23, 2017 |
| Redhat_linux | — | Upgrade java-1.7.1-ibm-pluginUpgrade java-1.6.0-ibm-demoUpgrade java-1.6.0-ibm-jdbcUpgrade java-1.8.0-ibmUpgrade java-1.6.0-ibmUpgrade java-1.6.0-ibm-javacommUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-develUpgrade java-1.6.0-ibm-pluginUpgrade java-1.6.0-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade satelliteUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibmUpgrade satellite-brandingUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibm-srcUpgrade java-1.6.0-ibm-develUpgrade java-1.8.0-ibm-devel | May 10, 2017 | Dec 20, 2016 |
| Suse | — | Upgrade java-1_6_0-ibm-develUpgrade java-1_7_0-openjdk-develUpgrade java-1_7_0-ibmUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-openjdkUpgrade java-1_6_0-ibm-alsaUpgrade sles12sp2-docker-imageUpgrade java-1_6_0-ibm-pluginUpgrade zlib-devel-32bitUpgrade java-1_8_0-ibm-develUpgrade zlib-x86Upgrade zlibUpgrade java-1_6_0-ibm-fontsUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_7_0-openjdk-demoUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_0-ibm-alsaUpgrade java-1_6_0-ibmUpgrade java-1_8_0-openjdk-develUpgrade sles12sp1-docker-imageUpgrade java-1_7_0-ibm-develUpgrade java-1_7_1-ibm-alsaUpgrade zlib-develUpgrade zlib-32bitUpgrade java-1_7_1-ibmUpgrade libz1-32bitUpgrade libz1Upgrade java-1_7_0-ibm-jdbcUpgrade java-1_8_0-ibmUpgrade zlib-devel-staticUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-ibm-alsaUpgrade java-1_6_0-ibm-jdbcUpgrade sles12-docker-image | Dec 21, 2016 | Dec 20, 2016 |
| Ubuntu | — | Upgrade klibc-utils (Ubuntu Pro)Upgrade zlib1gUpgrade lib32z1Upgrade lib64z1Upgrade libklibcUpgrade klibc-utilsUpgrade libx32z1Upgrade libklibc (Ubuntu Pro)Upgrade rsync | Jan 23, 2020 | Dec 20, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub