CVE-2016-9840: boost before 1.78.0 (exclusive); +21 more affected products

Affected technology

boost · before 1.78.0 (exclusive)
boost

zlib · from 1.2.0.6 (inclusive), before 1.2.9 (exclusive)
zlib

leap · 42.1
opensuse

leap · 42.2
opensuse

opensuse · 13.2
opensuse

debian linux · 8.0
debian

ubuntu linux · 16.04
canonical

ubuntu linux · 18.04
canonical

database server · 18c
oracle

jdk · 1.6.0 · update update161
oracle

jdk · 1.7.0 · update update151
oracle

jdk · 1.8.0 · update update144
oracle

jre · 1.6.0 · update update161
oracle

jre · 1.7.0 · update update151
oracle

jre · 1.8.0 · update update144
oracle

mysql · from 5.5.0 (inclusive), through 5.5.61 (inclusive)
oracle

mysql · from 5.6.0 (inclusive), through 5.6.41 (inclusive)
oracle

mysql · from 5.7.0 (inclusive), through 5.7.23 (inclusive)
oracle

mysql · from 8.0.0 (inclusive), through 8.0.12 (inclusive)
oracle

satellite · 5.8
redhat

enterprise linux desktop · 6.0
redhat

enterprise linux desktop · 7.0
redhat

enterprise linux eus · 7.4
redhat

enterprise linux eus · 7.5
redhat

enterprise linux server · 6.0
redhat

enterprise linux server · 7.0
redhat

enterprise linux workstation · 6.0
redhat

enterprise linux workstation · 7.0
redhat

iphone os · before 11 (exclusive)
apple

mac os x · from 10.0.0 (inclusive), before 10.13.0 (exclusive)
apple

tvos · before 11.0 (exclusive)
apple

watchos · before 4 (exclusive)
apple

node.js · from 4.0.0 (inclusive), through 4.1.2 (inclusive)
nodejs

node.js · from 4.2.0 (inclusive), before 4.8.2 (exclusive)
nodejs

node.js · from 6.0.0 (inclusive), through 6.8.1 (inclusive)
nodejs

node.js · from 6.9.0 (inclusive), before 6.10.2 (exclusive)
nodejs

node.js · from 7.0.0 (inclusive), before 7.6.0 (exclusive)
nodejs

n/a · n/a
Vendor not specified by the source

CADRA · 0 to before V2511
Siemens

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

Context-dependent attackers might have unspecified impact by leveraging improper pointer arithmetic. NVD’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.