ISOMAN

CVE

CVE-2016-9843

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

Severity
CRITICAL
CVSS
9.8
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html
  2. http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html
  3. http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
  4. http://www.openwall.com/lists/oss-security/2016/12/05/21
  5. http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
  6. http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
  7. http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
  8. http://www.securityfocus.com/bid/95131
  9. http://www.securitytracker.com/id/1039427
  10. http://www.securitytracker.com/id/1041888
  11. https://access.redhat.com/errata/RHSA-2017:1220
  12. https://access.redhat.com/errata/RHSA-2017:1221
  13. https://access.redhat.com/errata/RHSA-2017:1222
  14. https://access.redhat.com/errata/RHSA-2017:2999
  15. https://access.redhat.com/errata/RHSA-2017:3046
  16. https://access.redhat.com/errata/RHSA-2017:3047
  17. https://access.redhat.com/errata/RHSA-2017:3453
  18. https://bugzilla.redhat.com/show_bug.cgi?id=1402351
  19. https://github.com/madler/zlib/commit/d1d577490c15a0c6862473d7576352a9f18ef811
  20. https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html