The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade zlibUpgrade perlUpgrade mariadb | Sep 20, 2017 | May 23, 2017 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-libsUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-embedded | Apr 27, 2020 | May 23, 2017 |
| Amazon_linux | — | Upgrade mysql57Upgrade mysql55Upgrade mysql56 | Dec 7, 2018 | Dec 20, 2016 |
| Apple Osx Zlib | — | Upgrade macOS to the latest version | Sep 26, 2017 | May 23, 2017 |
| Centos_linux | — | Upgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.6.0-ibm-pluginUpgrade java-1.7.1-ibm-demoUpgrade java-1.6.0-ibm-javacommUpgrade java-1.6.0-ibm-demoUpgrade java-1.8.0-ibmUpgrade java-1.6.0-ibm-jdbcUpgrade java-1.8.0-ibm-demoUpgrade java-1.6.0-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.6.0-ibm-develUpgrade satellite-brandingUpgrade java-1.7.1-ibm-pluginUpgrade java-1.6.0-ibm-srcUpgrade java-1.7.1-ibmUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-develUpgrade satellite | Aug 28, 2019 | May 23, 2017 |
| Debian | — | Upgrade zlibUpgrade rsync | Mar 25, 2019 | May 23, 2017 |
| Freebsd | — | Upgrade percona56-serverUpgrade mariadb101-serverUpgrade percona55-serverUpgrade mariadb103-serverUpgrade mysql56-serverUpgrade percona57-serverUpgrade mariadb102-serverUpgrade rsyncUpgrade mysql55-serverUpgrade mariadb100-serverUpgrade mysql57-serverUpgrade mariadb55-serverUpgrade mysql80-server | Aug 16, 2020 | Oct 20, 2018 |
| Gentoo Linux | — | Upgrade net-misc/rsync.Upgrade sys-libs/zlib. | Oct 30, 2017 | May 23, 2017 |
| Huawei Euleros 2_0_sp10 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 3, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp11 | — | Upgrade syslinuxUpgrade syslinux-nonlinux | Jan 10, 2024 | May 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade zlibUpgrade zlib-devel | Dec 27, 2019 | May 23, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Oct 11, 2022 | May 23, 2017 |
| Huawei Euleros 2_0_sp9 | — | Upgrade syslinux-nonlinuxUpgrade syslinux | Nov 15, 2022 | May 23, 2017 |
| Ibm Aix | — | Apply the fix or workaround for java_apr2017_advisory | Nov 6, 2017 | May 23, 2017 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 23, 2017 |
| Oracle Missing Cpu Jul 2020 | — | Apply the July 2020 Critical Patch Update (CPU) for Oracle Database | Oct 20, 2020 | May 23, 2017 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.5.62Upgrade to Oracle MySQL version 8.0.13Upgrade to Oracle MySQL version 5.6.42Upgrade to Oracle MySQL version 5.7.24 | Apr 21, 2026 | Apr 21, 2026 |
| Oracle Solaris | — | Upgrade database/mysql-57 to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4Upgrade network/rsync to version 3.1.3-11.4.3.0.1.3.0 on Solaris 11.4Upgrade library/zlib to version 1.2.11-0.175.3.20.0.2.0 on Solaris 11.3Upgrade database/mysql-57/embedded to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.24-11.4.4.0.1.4.0 on Solaris 11.4 | May 29, 2017 | May 23, 2017 |
| Redhat_linux | — | Upgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-demoUpgrade java-1.6.0-ibm-demoUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-pluginUpgrade java-1.6.0-ibm-jdbcUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.6.0-ibm-srcUpgrade java-1.6.0-ibm-develUpgrade java-1.6.0-ibmUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-develUpgrade satelliteUpgrade java-1.8.0-ibmUpgrade java-1.6.0-ibm-javacommUpgrade java-1.7.1-ibmUpgrade java-1.6.0-ibm-pluginUpgrade satellite-brandingUpgrade java-1.8.0-ibm-demo | May 10, 2017 | Dec 20, 2016 |
| Suse | — | Upgrade minizip-develUpgrade java-1_6_0-ibm-fontsUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-openjdk-headlessUpgrade mariadb-errormessagesUpgrade libmysqlclient18-32bitUpgrade java-1_8_0-ibm-pluginUpgrade libmysql55client18-x86Upgrade java-1_8_0-openjdk-demoUpgrade mariadb-clientUpgrade libminizip1Upgrade libmysqlclient-develUpgrade mariadb-toolsUpgrade java-1_7_1-ibmUpgrade java-1_7_0-openjdk-demoUpgrade java-1_8_0-openjdkUpgrade libmysqlclient_r18-32bitUpgrade java-1_7_0-ibmUpgrade mariadb-testUpgrade java-1_7_1-ibm-alsaUpgrade java-1_6_0-ibm-develUpgrade libz1Upgrade java-1_7_0-ibm-jdbcUpgrade java-1_7_0-openjdk-develUpgrade java-1_7_1-ibm-pluginUpgrade libmysql55client18-32bitUpgrade java-1_7_1-ibm-jdbcUpgrade mariadbUpgrade java-1_6_0-ibmUpgrade java-1_7_0-openjdk-headlessUpgrade mysql-toolsUpgrade zlib-devel-32bitUpgrade sles12sp1-docker-imageUpgrade mysql-clientUpgrade libz1-32bitUpgrade java-1_6_0-ibm-jdbcUpgrade libmysqld-develUpgrade libmariadbd19Upgrade libmysql55client_r18Upgrade libmysql55client_r18-32bitUpgrade java-1_7_0-ibm-alsaUpgrade java-1_7_1-ibm-develUpgrade zlib-x86Upgrade libmysqlclient18Upgrade libmysqld18Upgrade mariadb-100-errormessagesUpgrade java-1_7_0-openjdkUpgrade zlibUpgrade java-1_6_0-ibm-pluginUpgrade mariadb-benchUpgrade java-1_8_0-openjdk-develUpgrade java-1_6_0-ibm-alsaUpgrade libmysqld19Upgrade java-1_8_0-ibm-alsaUpgrade java-1_7_0-ibm-pluginUpgrade zlib-develUpgrade java-1_7_0-ibm-develUpgrade mariadb-galeraUpgrade java-1_8_0-ibmUpgrade libmysql55client18Upgrade sles12-docker-imageUpgrade sles12sp2-docker-imageUpgrade zlib-32bitUpgrade libmariadbd-develUpgrade libmysql55client_r18-x86Upgrade libmysqlclient_r18Upgrade mysqlUpgrade zlib-devel-static | Dec 20, 2016 | Dec 20, 2016 |
| Ubuntu | — | Upgrade klibc-utils (Ubuntu Pro)Upgrade lib64z1Upgrade libklibc (Ubuntu Pro)Upgrade zlib1gUpgrade klibc-utilsUpgrade lib32z1Upgrade libklibcUpgrade libx32z1Upgrade rsync | Jan 23, 2020 | Dec 20, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub