The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.10907
Percentile: 0.93076

CVSS Scoring

Affected Products

• cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*
• cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
• cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*
• cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
• cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*
• cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
• cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
• cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
• cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
• cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*
• cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
• cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*
• cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

← Back to Home