CVE-2016-9843
CVE-2016-9843
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
CVSS 9.8 · Critical · EPSS 5.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
rsync Debian:12
- Affected ranges
- ECOSYSTEM: < 3.1.3-6
Update to 3.1.3-6
rsync Debian:13
- Affected ranges
- ECOSYSTEM: < 3.1.3-6
Update to 3.1.3-6
rsync Debian:14
- Affected ranges
- ECOSYSTEM: < 3.1.3-6
Update to 3.1.3-6
zlib Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.2.8.dfsg-3
Update to 1:1.2.8.dfsg-3
zlib Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.2.8.dfsg-3
Update to 1:1.2.8.dfsg-3
zlib Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.2.8.dfsg-3
Update to 1:1.2.8.dfsg-3
klibc Ubuntu:Pro:14.04:LTS
- Versions
- 2.0.1-3.1ubuntu2
- 2.0.2-1ubuntu1
- 2.0.2-1ubuntu2
- 2.0.3-0ubuntu1
- 2.0.3-0ubuntu1.14.04.1
- 2.0.3-0ubuntu1.14.04.2
- 2.0.3-0ubuntu1.14.04.3
- 2.0.3-0ubuntu1.14.04.3+esm2
- 2.0.3-0ubuntu1.14.04.3+esm3
- Affected ranges
- ECOSYSTEM: < 2.0.3-0ubuntu1.14.04.3+esm4
Update to 2.0.3-0ubuntu1.14.04.3+esm4
zlib Ubuntu:Pro:14.04:LTS
- Versions
- 1:1.2.8.dfsg-1ubuntu1
- 1:1.2.8.dfsg-1ubuntu1.1
- 1:1.2.8.dfsg-1ubuntu1.1+esm1
- 1:1.2.8.dfsg-1ubuntu1.1+esm2
- 1:1.2.8.dfsg-1ubuntu1.1+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rsync Ubuntu:16.04:LTS
- Versions
- 3.1.1-3
- 3.1.1-3ubuntu1
- 3.1.1-3ubuntu1.1
- 3.1.1-3ubuntu1.2
- Affected ranges
- ECOSYSTEM: < 3.1.1-3ubuntu1.3
Update to 3.1.1-3ubuntu1.3
zlib Ubuntu:16.04:LTS
- Versions
- 1:1.2.8.dfsg-2ubuntu4
- 1:1.2.8.dfsg-2ubuntu4.1
- Affected ranges
- ECOSYSTEM: < 1:1.2.8.dfsg-2ubuntu4.3
Update to 1:1.2.8.dfsg-2ubuntu4.3
klibc Ubuntu:Pro:16.04:LTS
- Versions
- 2.0.3-0ubuntu1
- 2.0.4-4
- 2.0.4-6
- 2.0.4-7
- 2.0.4-8
- 2.0.4-8ubuntu1
- 2.0.4-8ubuntu1.16.04.1
- 2.0.4-8ubuntu1.16.04.2
- 2.0.4-8ubuntu1.16.04.3
- 2.0.4-8ubuntu1.16.04.4
- 2.0.4-8ubuntu1.16.04.4+esm1
- 2.0.4-8ubuntu1.16.04.4+esm2
- Affected ranges
- ECOSYSTEM: < 2.0.4-8ubuntu1.16.04.4+esm3
Update to 2.0.4-8ubuntu1.16.04.4+esm3
zsync Ubuntu:16.04:LTS
- Versions
- 0.6.2-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rsync Ubuntu:18.04:LTS
- Versions
- 3.1.2-2
- 3.1.2-2.1
- 3.1.2-2.1ubuntu1
- Affected ranges
- ECOSYSTEM: < 3.1.2-2.1ubuntu1.1
Update to 3.1.2-2.1ubuntu1.1
klibc Ubuntu:Pro:18.04:LTS
- Versions
- 2.0.4-9ubuntu1
- 2.0.4-9ubuntu2
- 2.0.4-9ubuntu2.1
- 2.0.4-9ubuntu2.2
- 2.0.4-9ubuntu2.2+esm1
- Affected ranges
- ECOSYSTEM: < 2.0.4-9ubuntu2.2+esm2
Update to 2.0.4-9ubuntu2.2+esm2
zsync Ubuntu:18.04:LTS
- Versions
- 0.6.2-2ubuntu1
- 0.6.2-3ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rsync Ubuntu:20.04:LTS
- Affected ranges
- ECOSYSTEM: < 3.1.3-6
Update to 3.1.3-6
klibc Ubuntu:Pro:20.04:LTS
- Versions
- 2.0.6-1ubuntu1
- 2.0.6-1ubuntu2
- 2.0.7-1ubuntu1
- 2.0.7-1ubuntu3
- 2.0.7-1ubuntu4
- 2.0.7-1ubuntu5
- 2.0.7-1ubuntu5.1
- 2.0.7-1ubuntu5.2
- Affected ranges
- ECOSYSTEM: < 2.0.7-1ubuntu5.2+esm1
Update to 2.0.7-1ubuntu5.2+esm1
zsync Ubuntu:20.04:LTS
- Versions
- 0.6.2-3ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
klibc Ubuntu:22.04:LTS
- Versions
- 2.0.8-6.1ubuntu2
- 2.0.10-3
- 2.0.10-4
- 2.0.10-4ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 2.0.10-4ubuntu0.2
Update to 2.0.10-4ubuntu0.2
zsync Ubuntu:22.04:LTS
- Versions
- 0.6.2-3ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
klibc Ubuntu:24.04:LTS
- Versions
- 2.0.13-1
- 2.0.13-2
- 2.0.13-2ubuntu1
- 2.0.13-4
- 2.0.13-4ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 2.0.13-4ubuntu0.2
Update to 2.0.13-4ubuntu0.2
zsync Ubuntu:24.04:LTS
- Versions
- 0.6.2-5
- 0.6.2-5build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
klibc Ubuntu:25.10
- Versions
- 2.0.13-4ubuntu1
- 2.0.14-1ubuntu1
- Affected ranges
- ECOSYSTEM: < 2.0.14-1ubuntu1.1
Update to 2.0.14-1ubuntu1.1
Original sources
- https://access.redhat.com/errata/RHSA-2017:1221
- https://access.redhat.com/errata/RHSA-2017:1220
- https://access.redhat.com/errata/RHSA-2017:3047
- http://www.openwall.com/lists/oss-security/2016/12/05/21
- http://www.securityfocus.com/bid/95131
- http://www.securitytracker.com/id/1041888
- https://access.redhat.com/errata/RHSA-2017:3046
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html
- https://security.gentoo.org/glsa/201701-56
- http://www.securitytracker.com/id/1039427
- https://access.redhat.com/errata/RHSA-2017:1222
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
- https://access.redhat.com/errata/RHSA-2017:3453
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html
- https://access.redhat.com/errata/RHSA-2017:2999
- https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html
- https://usn.ubuntu.com/4246-1/
- https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html
- https://usn.ubuntu.com/4292-1/
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-9843