CVE-2016-9841: zlib from 1.2.0 (inclusive), before 1.2.9 (exclusive); +40 more affected products

Affected technology

zlib · from 1.2.0 (inclusive), before 1.2.9 (exclusive)
zlib

leap · 42.1
opensuse

leap · 42.2
opensuse

opensuse · 13.2
opensuse

debian linux · 8.0
debian

ubuntu linux · 16.04
canonical

ubuntu linux · 18.04
canonical

database server · 18c
oracle

jdk · 1.6.0 · update update161
oracle

jdk · 1.7.0 · update update151
oracle

jdk · 1.8.0 · update update144
oracle

jre · 1.6.0 · update update161
oracle

jre · 1.7.0 · update update151
oracle

jre · 1.8.0 · update update144
oracle

mysql · from 5.5.0 (inclusive), through 5.5.61 (inclusive)
oracle

mysql · from 5.6.0 (inclusive), through 5.6.41 (inclusive)
oracle

mysql · from 5.7.0 (inclusive), through 5.7.23 (inclusive)
oracle

mysql · from 8.0.0 (inclusive), through 8.0.12 (inclusive)
oracle

satellite · 5.8
redhat

enterprise linux desktop · 6.0
redhat

enterprise linux desktop · 7.0
redhat

enterprise linux eus · 7.4
redhat

enterprise linux eus · 7.5
redhat

enterprise linux server · 6.0
redhat

enterprise linux server · 7.0
redhat

enterprise linux workstation · 6.0
redhat

enterprise linux workstation · 7.0
redhat

iphone os · before 11 (exclusive)
apple

mac os x · from 10.0.0 (inclusive), before 10.13.0 (exclusive)
apple

tvos · before 11.0 (exclusive)
apple

watchos · before 4 (exclusive)
apple

active iq unified manager · from 7.3 (inclusive)
netapp

active iq unified manager · from 9.5 (inclusive)
netapp

cloud backup · Version not applicable in the source CPE
netapp

e-series santricity management · Version not applicable in the source CPE
netapp

e-series santricity os controller · from 11.0.0 (inclusive), through 11.70.1 (inclusive)
netapp

e-series santricity storage manager · Version not applicable in the source CPE
netapp

e-series santricity web services · Version not applicable in the source CPE
netapp

oncommand balance · Version not applicable in the source CPE
netapp

oncommand insight · Version not applicable in the source CPE
netapp

oncommand performance manager · Version not applicable in the source CPE
netapp

oncommand shift · Version not applicable in the source CPE
netapp

oncommand unified manager · through 7.1 (inclusive)
netapp

oncommand unified manager · Version not applicable in the source CPE
netapp

oncommand workflow automation · Version not applicable in the source CPE
netapp

snapmanager · Version not applicable in the source CPE
netapp

solidfire · Version not applicable in the source CPE
netapp

steelstore cloud integrated storage · Version not applicable in the source CPE
netapp

storage replication adapter for clustered data ontap · Version not applicable in the source CPE
netapp

symantec netbackup · Version not applicable in the source CPE
netapp

vasa provider for clustered data ontap · from 7.2 (inclusive)
netapp

virtual storage console · Version not applicable in the source CPE
netapp

hci storage node · Version not applicable in the source CPE
netapp

node.js · from 4.0.0 (inclusive), through 4.1.2 (inclusive)
nodejs

node.js · from 4.2.0 (inclusive), before 4.8.2 (exclusive)
nodejs

node.js · from 6.0.0 (inclusive), through 6.8.1 (inclusive)
nodejs

node.js · from 6.9.0 (inclusive), before 6.10.2 (exclusive)
nodejs

node.js · from 7.0.0 (inclusive), before 7.6.0 (exclusive)
nodejs

n/a · n/a
Vendor not specified by the source

CADRA · 0 to before V2511
Siemens

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Context-dependent attackers might have unspecified impact by leveraging improper pointer arithmetic. NVD’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high.