The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadbUpgrade zlibUpgrade perl | Sep 20, 2017 | May 23, 2017 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-embedded | Apr 27, 2020 | May 23, 2017 |
| Amazon_linux | — | Upgrade mysql57Upgrade mysql55Upgrade mysql56 | Dec 7, 2018 | Dec 20, 2016 |
| Apple Osx Zlib | — | Upgrade macOS to the latest version | Sep 26, 2017 | May 23, 2017 |
| Centos_linux | — | Upgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-develUpgrade satelliteUpgrade java-1.6.0-ibmUpgrade satellite-brandingUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibmUpgrade java-1.6.0-ibm-develUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-develUpgrade java-1.6.0-ibm-srcUpgrade java-1.6.0-ibm-jdbcUpgrade java-1.6.0-ibm-demoUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-demoUpgrade java-1.6.0-ibm-javacommUpgrade java-1.8.0-ibm-srcUpgrade java-1.6.0-ibm-pluginUpgrade java-1.8.0-ibm | Aug 28, 2019 | May 23, 2017 |
| Debian | — | Upgrade zlibUpgrade rsync | Mar 25, 2019 | May 23, 2017 |
| Freebsd | — | Upgrade mariadb101-serverUpgrade percona56-serverUpgrade percona57-serverUpgrade mysql56-serverUpgrade mariadb103-serverUpgrade percona55-serverUpgrade mysql80-serverUpgrade mariadb55-serverUpgrade rsyncUpgrade mariadb100-serverUpgrade mysql55-serverUpgrade mysql57-serverUpgrade mariadb102-server | Aug 16, 2020 | Oct 20, 2018 |
| Gentoo Linux | — | Upgrade net-misc/rsync.Upgrade sys-libs/zlib. | Oct 30, 2017 | May 23, 2017 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Nov 3, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Jan 10, 2024 | May 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade zlib-develUpgrade zlib | Dec 27, 2019 | May 23, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Oct 11, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 15, 2022 | May 23, 2017 |
| Ibm Aix | — | Apply the fix or workaround for java_apr2017_advisory | Nov 6, 2017 | May 23, 2017 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 23, 2017 |
| Oracle Missing Cpu Jul 2020 | — | Apply the July 2020 Critical Patch Update (CPU) for Oracle Database | Oct 20, 2020 | May 23, 2017 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.7.24Upgrade to Oracle MySQL version 5.6.42Upgrade to Oracle MySQL version 8.0.13Upgrade to Oracle MySQL version 5.5.62 | Apr 21, 2026 | Apr 21, 2026 |
| Oracle Solaris | — | Upgrade library/zlib to version 1.2.11-0.175.3.20.0.2.0 on Solaris 11.3Upgrade database/mysql-57/library to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4Upgrade network/rsync to version 3.1.3-11.4.3.0.1.3.0 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4 | May 29, 2017 | May 23, 2017 |
| Redhat_linux | — | Upgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-srcUpgrade java-1.6.0-ibm-demoUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.6.0-ibm-jdbcUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibmUpgrade java-1.6.0-ibm-javacommUpgrade satelliteUpgrade java-1.6.0-ibmUpgrade java-1.7.1-ibm-pluginUpgrade java-1.6.0-ibm-srcUpgrade satellite-brandingUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.6.0-ibm-pluginUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.6.0-ibm-develUpgrade java-1.8.0-ibm | May 10, 2017 | Dec 20, 2016 |
| Suse | — | Upgrade libmysql55client18Upgrade mariadb-galeraUpgrade zlib-devel-32bitUpgrade mysqlUpgrade libz1-32bitUpgrade mysql-clientUpgrade libmysqlclient_r18Upgrade libmysql55client_r18-32bitUpgrade java-1_8_0-ibmUpgrade libmysql55client_r18Upgrade libmysqld-develUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_8_0-ibm-alsaUpgrade libmysqld19Upgrade zlib-develUpgrade java-1_7_0-ibm-pluginUpgrade libmysql55client_r18-x86Upgrade java-1_7_0-ibm-develUpgrade sles12sp2-docker-imageUpgrade zlib-32bitUpgrade libmysqld18Upgrade libmysqlclient18Upgrade mariadb-100-errormessagesUpgrade zlibUpgrade java-1_7_0-openjdkUpgrade java-1_6_0-ibm-alsaUpgrade mysql-toolsUpgrade zlib-x86Upgrade libmariadbd-develUpgrade java-1_7_1-ibm-develUpgrade zlib-devel-staticUpgrade java-1_7_0-ibm-alsaUpgrade sles12-docker-imageUpgrade mariadb-benchUpgrade sles12sp1-docker-imageUpgrade java-1_8_0-openjdk-develUpgrade libmariadbd19Upgrade java-1_6_0-ibm-pluginUpgrade java-1_8_0-openjdkUpgrade libmysqlclient_r18-32bitUpgrade java-1_6_0-ibm-develUpgrade mariadb-errormessagesUpgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_8_0-ibm-pluginUpgrade mariadbUpgrade java-1_6_0-ibmUpgrade java-1_7_0-openjdk-demoUpgrade java-1_7_1-ibm-jdbcUpgrade minizip-develUpgrade java-1_6_0-ibm-fontsUpgrade java-1_8_0-openjdk-demoUpgrade mariadb-clientUpgrade libz1Upgrade java-1_7_0-ibmUpgrade java-1_7_0-openjdk-headlessUpgrade libmysql55client18-32bitUpgrade java-1_8_0-ibm-develUpgrade mariadb-toolsUpgrade java-1_7_1-ibm-alsaUpgrade libmysqlclient-develUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_7_1-ibmUpgrade java-1_7_0-openjdk-develUpgrade libminizip1Upgrade libmysqlclient18-32bitUpgrade mariadb-testUpgrade libmysql55client18-x86 | Dec 20, 2016 | Dec 20, 2016 |
| Ubuntu | — | Upgrade libklibc (Ubuntu Pro)Upgrade zlib1gUpgrade lib64z1Upgrade klibc-utils (Ubuntu Pro)Upgrade klibc-utilsUpgrade rsyncUpgrade libklibcUpgrade libx32z1Upgrade lib32z1 | Jan 23, 2020 | Dec 20, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub