peter bassill · operator
$ cve CVE-2016-9843 JSON

CVE-2016-9843

9.8
CRITICAL · CVSS 3.1 · EPSS 5.8% (pctl 93)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS5.77% — more likely to be exploited than 93% of all CVEs
On CISA KEVno
Public exploitnone known
Published2017-05-23
Last modified2026-06-17

Affected (24)

VendorProduct
appleiphone os
applemac os x
appletvos
applewatchos
canonicalubuntu linux
debiandebian linux
mariadbmariadb
netappactive iq unified manager
netapponcommand insight
netapponcommand workflow automation
netappsnapcenter
nodejsnode.js
opensuseleap
opensuseopensuse
oracledatabase server
oraclejdk
oraclejre
oraclemysql
redhatenterprise linux desktop
redhatenterprise linux eus
redhatenterprise linux server
redhatenterprise linux workstation
redhatsatellite
zlibzlib

References

→ the Explorer  ·  watch your stack  ·  NVD