Vulnerabilities

CVSS

9.8 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Risk score

78.4

Published

2017-05-23

Status

Published

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Coverage 1

vulnerability

Siemens CADRA

Siemens CADRA is affected by multiple vulnerabilities within the zlib library, primarily stemming from improper input validation and integer overflows. These vulnerabilities could lead to denial-of-service crashes, heap…

CISA Advisories · Jul 21, 2026 High

CVE-2005-2096CVE-2016-9840CVE-2016-9841zlibvulnerabilitybuffer overflow

All articles mentioning it

Advisories and references

• lists.opensuse.org/opensuse-updates/2016-12/msg00127.html
• lists.opensuse.org/opensuse-updates/2017-01/msg00050.html
• lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
• openwall.com/lists/oss-security/2016/12/05/21
• securityfocus.com/bid/95131
• securitytracker.com/id/1039427
• securitytracker.com/id/1039596
• cert-portal.siemens.com/productcert/html/ssa-470355.html
• lists.debian.org/debian-lts-announce/2019/03/msg00027.html
• lists.debian.org/debian-lts-announce/2020/01/msg00030.html