The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade zlibUpgrade perl | Sep 20, 2017 | May 23, 2017 |
| Apple Osx Zlib | — | Upgrade macOS to the latest version | Sep 26, 2017 | May 23, 2017 |
| Centos_linux | — | Upgrade java-1.6.0-ibm-jdbcUpgrade java-1.6.0-ibm-srcUpgrade java-1.6.0-ibmUpgrade java-1.8.0-ibm-demoUpgrade java-1.6.0-ibm-pluginUpgrade java-1.8.0-ibmUpgrade java-1.6.0-ibm-demoUpgrade java-1.7.1-ibm-pluginUpgrade java-1.6.0-ibm-javacommUpgrade java-1.8.0-ibm-pluginUpgrade satellite-brandingUpgrade java-1.6.0-ibm-develUpgrade java-1.7.1-ibm-develUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-develUpgrade satelliteUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-demo | Aug 28, 2019 | May 23, 2017 |
| Debian | — | Upgrade rsyncUpgrade zlib | Mar 25, 2019 | May 23, 2017 |
| Freebsd | — | Upgrade rsync | Aug 17, 2020 | Aug 16, 2020 |
| Gentoo Linux | — | Upgrade net-misc/rsync.Upgrade sys-libs/zlib. | Oct 30, 2017 | May 23, 2017 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 3, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Jan 10, 2024 | May 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade zlibUpgrade zlib-devel | Dec 27, 2019 | May 23, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Oct 11, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 15, 2022 | May 23, 2017 |
| Ibm Aix | — | Apply the fix or workaround for java_apr2017_advisory | Nov 6, 2017 | May 23, 2017 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.5.62Upgrade to Oracle MySQL version 8.0.13Upgrade to Oracle MySQL version 5.6.42Upgrade to Oracle MySQL version 5.7.24 | Apr 21, 2026 | Apr 21, 2026 |
| Oracle Solaris | — | Upgrade library/zlib to version 1.2.11-0.175.3.20.0.2.0 on Solaris 11.3Upgrade network/rsync to version 3.1.3-11.4.3.0.1.3.0 on Solaris 11.4 | May 29, 2017 | May 23, 2017 |
| Redhat_linux | — | Upgrade java-1.6.0-ibm-demoUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.6.0-ibm-develUpgrade satellite-brandingUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-demoUpgrade java-1.6.0-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibmUpgrade java-1.6.0-ibm-jdbcUpgrade java-1.6.0-ibm-pluginUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-demoUpgrade java-1.6.0-ibm-srcUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.6.0-ibm-javacommUpgrade satelliteUpgrade java-1.7.1-ibm-devel | May 10, 2017 | Dec 20, 2016 |
| Suse | — | Upgrade java-1_7_0-ibm-pluginUpgrade java-1_8_0-openjdk-develUpgrade java-1_7_0-ibmUpgrade java-1_8_0-ibm-alsaUpgrade java-1_6_0-ibm-fontsUpgrade sles12sp2-docker-imageUpgrade java-1_7_0-openjdk-develUpgrade java-1_7_1-ibm-pluginUpgrade zlib-32bitUpgrade java-1_6_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_7_0-openjdk-demoUpgrade zlib-x86Upgrade java-1_6_0-ibm-alsaUpgrade zlibUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_7_0-openjdkUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-alsaUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_7_0-ibm-jdbcUpgrade libz1Upgrade java-1_7_1-ibm-jdbcUpgrade zlib-develUpgrade java-1_6_0-ibmUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibmUpgrade java-1_8_0-openjdk-demoUpgrade zlib-devel-32bitUpgrade libz1-32bitUpgrade java-1_7_0-ibm-alsaUpgrade zlib-devel-staticUpgrade java-1_6_0-ibm-develUpgrade java-1_8_0-ibmUpgrade sles12-docker-imageUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_7_0-ibm-develUpgrade java-1_8_0-openjdkUpgrade sles12sp1-docker-image | Dec 21, 2016 | Dec 20, 2016 |
| Ubuntu | — | Upgrade rsyncUpgrade libx32z1Upgrade lib64z1Upgrade lib32z1Upgrade zlib1g | Jan 23, 2020 | Dec 20, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub