Skip to content
Heist/ feed
Back to feed
Critical

Security advisory

Type: advisorySources: OSVCVE: CVE-2016-9843

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2016-9843
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 09:04 UTC · Revision 1

Source evidence

CVE-2016-9843

core-osv · Original source

Published 23 May 2017, 04:29 UTC

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

osv:CVE-2016-9843
Complete source record
{
  "id": "f14cf9c05e6417116d1e353d89a68b079b9d85175c161748c3af2ae421bb5dff",
  "url": "https://osv.dev/vulnerability/CVE-2016-9843",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2016-9843",
    "summary": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
    "evidence": "osv:CVE-2016-9843",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2016-9843",
      "aliases": [
        "CVE-2016-9843",
        "PSF-2017-5"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/madler/zlib",
              "type": "GIT",
              "events": [
                {
                  "introduced": "7c2a874e50b871d04fbd19501f7b42cff55e5abc"
                },
                {
                  "fixed": "2fa463bacfff79181df1a5270fb67cc679a53e71"
                },
                {
                  "fixed": "d1d577490c15a0c6862473d7576352a9f18ef811"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "1.2.0"
                      },
                      {
                        "fixed": "1.2.9"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "range": [
                      {
                        "fixed": "d1d577490c15a0c6862473d7576352a9f18ef811"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v1.2.8",
            "v1.2.7.3",
            "v1.2.7.2",
            "v1.2.7.1",
            "v1.2.7",
            "v1.2.6.1",
            "v1.2.6",
            "v1.2.5.3",
            "v1.2.5.2",
            "v1.2.5.1",
            "v1.2.5",
            "v1.2.4.5",
            "v1.2.4.4",
            "v1.2.4.3",
            "v1.2.4.2",
            "v1.2.4.1",
            "v1.2.4",
            "v1.2.4-pre2",
            "v1.2.4-pre1",
            "v1.2.3.9",
            "v1.2.3.8",
            "v1.2.3.7",
            "v1.2.3.6",
            "v1.2.3.5",
            "v1.2.3.4",
            "v1.2.3.3",
            "v1.2.3.2",
            "v1.2.3.1",
            "v1.2.3",
            "v1.2.2.4",
            "v1.2.2.3",
            "v1.2.2.2",
            "v1.2.2.1",
            "v1.2.2",
            "v1.2.1.2",
            "v1.2.1.1",
            "v1.2.1",
            "v1.2.0.8",
            "v1.2.0.7",
            "v1.2.0.6",
            "v1.2.0.5",
            "v1.2.0.4",
            "v1.2.0.3",
            "v1.2.0.2",
            "v1.2.0.1",
            "v1.2.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9843.json",
            "vanir_signatures": [
              {
                "id": "CVE-2016-9843-414fe37a",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "16120810892851687554789220157819832702",
                    "131827276427891043182256510196340875300",
                    "189513208101419307945534658579998871654",
                    "212147175082612510136412243030409560140",
                    "299085759267730258754641938507926344080",
                    "138959356155413799645705262600700520329",
                    "29752084737358720135606731688432604107",
                    "166620327939650871483308933286046278470"
                  ]
                },
                "source": "https://github.com/madler/zlib/commit/2fa463bacfff79181df1a5270fb67cc679a53e71",
                "target": {
                  "file": "contrib/infback9/inftree9.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2016-9843-650ecf33",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "7520686413246627020450369966414567813",
                    "185218452507105074344466240122345085312",
                    "122598993764574949696391344028951255785",
                    "68790856490769415000555817960458189898",
                    "312396610066626601976161403606852569542",
                    "58290635503586024135687246048442384320",
                    "56257635472176494025514288891627516122",
                    "48419906790453504580546155601585011871",
                    "129288830573974287994851663631918110070",
                    "309613971747137665366059309652626476656",
                    "59808224210313279059403352897595966020"
                  ]
                },
                "source": "https://github.com/madler/zlib/commit/d1d577490c15a0c6862473d7576352a9f18ef811",
                "target": {
                  "file": "crc32.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2016-9843-7d837108",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "33289512042373412906093149139436580830",
                    "91426820839317131268716791780186008144",
                    "194818944693421866592958753112657371532",
                    "159668138545083466055711927804961193023",
                    "255066741664144691720111386013603848817",
                    "234232056215069776200927132383547217084",
                    "295366361648995060731826038642910043574",
                    "194364176202057146808626712171096427014"
                  ]
                },
                "source": "https://github.com/madler/zlib/commit/2fa463bacfff79181df1a5270fb67cc679a53e71",
                "target": {
                  "file": "inftrees.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2016-9843-877aa23a",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "173123370633123651154244949134281019542",
                    "102273106005205754638040113472517884264",
                    "235429814244466703824677965529538273675",
                    "208303993750882978934021550073336842459",
                    "97615609550968706431926448181519994863",
                    "339118080829838946074693924107468946553",
                    "80218173194119430334455345176075092856",
                    "221115080022463896686917755184628890434",
                    "220779142876063203106760351651649795828",
                    "79972837918061490055760410628729165483",
                    "29640572416293066614062894907893542972",
                    "320836455951002542724053434768351830366",
                    "278439570502606989562359642144711240921",
                    "74969605840670941905966442808748242415",
                    "136349982313411503433050181948921111059",
                    "84828482625013498067679033752823325859",
                    "218156909012989000717970859258362570251",
                    "156120690550699675574548547437792604157",
                    "174169894385923384555886757688589868129",
                    "113887265610536653913694580851125688715",
                    "322944331613534704823013669100696288875",
                    "25052244974639821325585794070234606822",
                    "38325901798038084643343130133098808807",
                    "158002972493212489475769473812998149461",
                    "292758423975469462340735089873782351214",
                    "197319885884091558389402997168622303229",
                    "273529858872929722013164257392580258347",
                    "2188558013403878625577241987667171928",
                    "227718873515223558132286010362181398299",
                    "337146253929636158546926301773569599342",
                    "276954032770302743552966193594550874576",
                    "326215511158024088703961555581128655326",
                    "243619819439693214143230160079414937501",
                    "232483367442315974246589415647223061426",
                    "260395415480728946097742438941645713965",
                    "292290712618831869667048484348647386677",
                    "191647618147979755276168823006196468103",
                    "219013074033810971796049774630081821884",
                    "205564429641538400226903564968255480612",
                    "294498949750680192840586029840089044143",
                    "183398131489758762038008857864289906980",
                    "69378252258223222776676769656103498778",
                    "150063933148831471523654235222726000523",
                    "160919057829188140111342717977171904200",
                    "113985210579133651988131412870508958926",
                    "236797731968003545657916862894293146441"
                  ]
                },
                "source": "https://github.com/madler/zlib/commit/2fa463bacfff79181df1a5270fb67cc679a53e71",
                "target": {
                  "file": "zconf.h"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2016-9843-ebd0da57",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "241551680136109100503375360648810826978",
                    "68187369923040033918172656615963607133",
                    "297761764425146664349507739115654243055"
                  ]
                },
                "source": "https://github.com/madler/zlib/commit/2fa463bacfff79181df1a5270fb67cc679a53e71",
                "target": {
                  "file": "deflate.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              }
            ],
            "vanir_signatures_modified": "2026-10-24T14:05:35Z"
          }
        },
        {
          "ranges": [
            {
              "repo": "https://github.com/mariadb/server",
              "type": "GIT",
              "events": [
                {
                  "introduced": "5bfe1a3917ee1bddc7f2cde0c88961875148873c"
                },
                {
                  "fixed": "bac287c315b1792e7ae33f91add6a60292f9bae8"
                },
                {
                  "introduced": "776555af021e917ce0d6235386b43ae59fdd5161"
                },
                {
                  "fixed": "b9a69f776d3dea825bc23759660258c28bf58cc7"
                },
                {
                  "introduced": "c235de12ae3723b96944337bd89ad9cc87f21d8f"
                },
                {
                  "fixed": "8d834cd0f370b306f63c2364552d187fc388e59e"
                },
                {
                  "introduced": "9664240c948a92c22ccda0e1f5a420eb776ddcb1"
                },
                {
                  "fixed": "32bebfeefb219aec22468a6eae30ffd4a778544d"
                },
                {
                  "introduced": "20ae591abd0bfe1bfaee546989ee163f4ef832b1"
                },
                {
                  "fixed": "fe0e65dbe28f93bfc677d12be4166415dc1bec5a"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "5.5.0"
                      },
                      {
                        "fixed": "5.5.62"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "10.0.0"
                      },
                      {
                        "fixed": "10.0.37"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "10.1.0"
                      },
                      {
                        "fixed": "10.1.37"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "10.2.0"
                      },
                      {
                        "fixed": "10.2.19"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "10.3.0"
                      },
                      {
                        "fixed": "10.3.11"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "mariadb-10.2.13",
            "mariadb-10.3.10",
            "mariadb-10.2.18",
            "mariadb-10.1.35",
            "mariadb-10.2.16",
            "mariadb-10.1.34",
            "mariadb-10.3.7",
            "mariadb-10.2.15",
            "mariadb-10.1.33",
            "mariadb-10.3.6",
            "mariadb-10.2.14",
            "mariadb-10.1.32",
            "mariadb-10.3.5",
            "mariadb-10.1.31",
            "mariadb-10.3.4",
            "mariadb-10.2.12",
            "mariadb-10.1.30",
            "mariadb-10.2.11",
            "mariadb-10.1.29",
            "mariadb-10.2.10",
            "mariadb-10.3.2",
            "mariadb-10.1.28",
            "mariadb-10.1.27",
            "mariadb-10.3.1",
            "mariadb-10.1.26",
            "mariadb-10.1.25",
            "mariadb-10.1.24",
            "mariadb-10.1.23",
            "mariadb-10.2.5",
            "mariadb-10.3.0",
            "mariadb-10.1.22",
            "mariadb-10.1.21",
            "mariadb-10.1.20",
            "mariadb-10.1.19",
            "mariadb-10.1.18",
            "mariadb-10.2.2",
            "mariadb-10.1.17",
            "mariadb-10.1.16",
            "mariadb-10.2.1",
            "mariadb-10.1.15",
            "mariadb-10.1.14",
            "mariadb-10.2.0",
            "mariadb-10.1.13",
            "mariadb-10.1.12",
            "mariadb-10.1.11",
            "mariadb-10.1.10",
            "mariadb-10.1.9",
            "mariadb-10.1.8",
            "mariadb-10.1.7",
            "mariadb-10.1.6",
            "mariadb-10.1.5",
            "mariadb-10.1.4",
            "mariadb-10.1.3",
            "mariadb-10.1.2",
            "mariadb-10.1.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9843.json",
            "vanir_signatures": [
              {
                "id": "CVE-2016-9843-31d9682c",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "160075039351122944864225182554874669088",
                    "79298247766313756764199076124200846221",
                    "45115464249083926102003093201691213873",
                    "234850493844753889546639429561578022423",
                    "28144202877714812540506170033579428584",
                    "64207172708277179404454160631042475789",
                    "237722189373658064007831416036979490253",
                    "40893712863390563503154152743217547031",
                    "117668516850458519561463813363427354257",
                    "157614703768094946194775545036620441701",
                    "15967427616295603339113842507058398295",
                    "104723310754908331401965919169681994802",
                    "128841576046909535802914848653453387150",
                    "284907253619130800196406482515430948114",
                    "58255352786302269574555313408484604557",
                    "157514477970302582442983000214658193991",
                    "49411501730675364796830781016823824091",
                    "156754744226265852277547691043485091575",
                    "151934133497638100292742275943448330976",
                    "10181848583206569474669288713374153883",
                    "247129231873868569546561042046461048482"
                  ]
                },
                "source": "https://github.com/mariadb/server/commit/bac287c315b1792e7ae33f91add6a60292f9bae8",
                "target": {
                  "file": "mysys/mf_iocache2.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              }
            ],
            "vanir_signatures_modified": "2026-10-24T14:05:35Z"
          }
        },
        {
          "ranges": [
            {
              "repo": "https://github.com/mysql/mysql-server",
              "type": "GIT",
              "events": [
                {
                  "introduced": "54df0057e18d8c82c23fbd4e0bf5b5dc2e762955"
                },
                {
                  "last_affected": "e48d775c6f066add457fa8cfb2ebc4d5ff0c7613"
                },
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "06bc670db0c0e45b3ea11409382a5c315961f682"
                },
                {
                  "last_affected": "913071c0b16cc03e703308250d795bc381627e37"
                },
                {
                  "introduced": "270fd3411e3d671a73ed9725940a30080f59ce6d"
                },
                {
                  "last_affected": "b93c1661d689c8b7decc7563ba15f6ed140a4eb6"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "5.5.0"
                      },
                      {
                        "last_affected": "5.5.61"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "5.6.0"
                      },
                      {
                        "last_affected": "5.6.41"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "5.7.0"
                      },
                      {
                        "last_affected": "5.7.23"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "8.0.0"
                      },
                      {
                        "last_affected": "8.0.12"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "mysql-5.6.41",
            "mysql-8.0.12",
            "mysql-5.5.61",
            "mysql-5.7.23",
            "mysql-5.5.60",
            "mysql-5.6.40",
            "mysql-5.5.59",
            "mysql-5.5.49",
            "mysql-5.5.47",
            "mysql-5.5.44",
            "mysql-5.5.27",
            "mysql-5.5.25",
            "mysql-5.5.23",
            "mysql-5.5.19",
            "mysql-5.5.15",
            "mysql-5.1.4",
            "mysql-4.0.4",
            "mysql-4.0.2",
            "mysql-3.23.36",
            "mysql-3.23.33",
            "mysql-3.23.32",
            "mysql-3.23.31",
            "mysql-3.23.30-gamma",
            "mysql-3.23.28-gamma",
            "mysql-3.23.22-beta"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9843.json"
          }
        },
        {
          "ranges": [
            {
              "repo": "https://github.com/nodejs/node",
              "type": "GIT",
              "events": [
                {
                  "introduced": "f9f837885343a2a3f5ba2b8c510eaac395c8c865"
                },
                {
                  "last_affected": "85df6ada477715020dbd22e2fb5e687d84d663ff"
                },
                {
                  "introduced": "6dc12b1042d5d4727f77e8a1c5758dab91400069"
                },
                {
                  "fixed": "ea2ceac846abb279fd4d141bfe32fc4f7a6e30e0"
                },
                {
                  "introduced": "ce3e3c5fe15479475c068482c48eb9cbf1ac9df5"
                },
                {
                  "last_affected": "c6a397bce63fc026421e1515b98eec9b8b5a8468"
                },
                {
                  "introduced": "6b1c40be84fbe5ea404f25e4e340a0c1fe67a60a"
                },
                {
                  "fixed": "fbc9fded2fb4caa104e55146e6fa4fc2c3d11daf"
                },
                {
                  "introduced": "362fe010fe8f6feb0030e1e02c689b501e11ddb7"
                },
                {
                  "fixed": "bebda6df68c71f233a2ee212b2569ae6e70b48a9"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                    "range": [
                      {
                        "introduced": "4.0.0"
                      },
                      {
                        "last_affected": "4.1.2"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                    "range": [
                      {
                        "introduced": "4.2.0"
                      },
                      {
                        "fixed": "4.8.2"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                    "range": [
                      {
                        "introduced": "6.0.0"
                      },
                      {
                        "last_affected": "6.8.1"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                    "range": [
                      {
                        "introduced": "6.9.0"
                      },
                      {
                        "fixed": "6.10.2"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                    "range": [
                      {
                        "introduced": "7.0.0"
                      },
                      {
                        "fixed": "7.6.0"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v4.8.1",
            "v6.10.1",
            "v6.10.0",
            "v4.8.0",
            "v7.5.0",
            "v4.7.3",
            "v6.9.5",
            "v4.7.2",
            "v6.9.4",
            "v7.4.0",
            "v4.7.1",
            "v6.9.3",
            "v7.3.0",
            "v7.2.1",
            "v4.7.0",
            "v6.9.2",
            "v7.2.0",
            "v4.6.2",
            "v7.1.0",
            "v7.0.0",
            "v6.9.1",
            "v6.9.0",
            "v4.6.1",
            "v6.8.1",
            "v6.8.0",
            "v6.7.0",
            "v4.6.0",
            "v6.6.0",
            "v6.5.0",
            "v4.5.0",
            "v6.4.0",
            "v6.3.1",
            "v6.3.0",
            "v4.4.7",
            "v4.4.6",
            "v6.2.2",
            "v6.2.1",
            "v4.4.5",
            "v6.2.0",
            "v4.4.4",
            "v6.1.0",
            "v6.0.0",
            "v4.4.3",
            "v4.4.2",
            "v4.4.1",
            "v4.4.0",
            "v4.3.2",
            "v4.3.1",
            "v4.3.0",
            "v4.2.6",
            "v4.2.5",
            "v4.2.4",
            "v4.2.3",
            "v4.2.2",
            "v4.2.1",
            "v4.2.0",
            "v4.1.2",
            "v4.1.1",
            "v4.1.0",
            "v4.0.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9843.json"
          }
        }
      ],
      "modified": "2026-10-24T14:05:35.453903998Z",
      "provider": "osv",
      "references": [
        "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html",
        "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html",
        "https://support.apple.com/HT208112",
        "https://support.apple.com/HT208113",
        "https://support.apple.com/HT208115",
        "https://support.apple.com/HT208144",
        "https://usn.ubuntu.com/4246-1/",
        "https://usn.ubuntu.com/4292-1/",
        "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib",
        "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf",
        "https://www.oracle.com/security-alerts/cpujul2020.html",
        "https://access.redhat.com/errata/RHSA-2017:1220",
        "https://access.redhat.com/errata/RHSA-2017:1221",
        "https://access.redhat.com/errata/RHSA-2017:1222",
        "https://access.redhat.com/errata/RHSA-2017:2999",
        "https://access.redhat.com/errata/RHSA-2017:3046",
        "https://access.redhat.com/errata/RHSA-2017:3047",
        "https://access.redhat.com/errata/RHSA-2017:3453",
        "https://security.gentoo.org/glsa/201701-56",
        "https://security.gentoo.org/glsa/202007-54",
        "https://security.netapp.com/advisory/ntap-20181018-0002/",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1402351",
        "https://github.com/madler/zlib/commit/d1d577490c15a0c6862473d7576352a9f18ef811"
      ],
      "provider_metadata": {
        "unresolved_ranges": [
          {
            "cpes": [
              "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "apple:iphone_os",
            "extracted_events": [
              {
                "range": [
                  {
                    "fixed": "11"
                  }
                ],
                "source": "CPE_RANGE"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "apple:mac_os_x",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "10.0.0"
                  },
                  {
                    "fixed": "10.13.0"
                  }
                ],
                "source": "CPE_RANGE"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "apple:tvos",
            "extracted_events": [
              {
                "range": [
                  {
                    "fixed": "11.0"
                  }
                ],
                "source": "CPE_RANGE"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "apple:watchos",
            "extracted_events": [
              {
                "range": [
                  {
                    "fixed": "4"
                  }
                ],
                "source": "CPE_RANGE"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "mariadb:mariadb",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "5.5.0"
                  },
                  {
                    "fixed": "5.5.62"
                  },
                  {
                    "introduced": "10.0.0"
                  },
                  {
                    "fixed": "10.0.37"
                  },
                  {
                    "introduced": "10.1.0"
                  },
                  {
                    "fixed": "10.1.37"
                  },
                  {
                    "introduced": "10.2.0"
                  },
                  {
                    "fixed": "10.2.19"
                  },
                  {
                    "introduced": "10.3.0"
                  },
                  {
                    "fixed": "10.3.11"
                  }
                ],
                "source": "CPE_RANGE"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
              "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*"
            ],
            "vendor_product": "netapp:active_iq_unified_manager",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "7.3"
                  },
                  {
                    "introduced": "9.5"
                  }
                ],
                "source": "CPE_RANGE"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"
            ],
            "vendor_product": "canonical:ubuntu_linux",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "16.04"
                  },
                  {
                    "last_affected": "16.04"
                  },
                  {
                    "introduced": "18.04"
                  },
                  {
                    "last_affected": "18.04"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "debian:debian_linux",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "8.0"
                  },
                  {
                    "last_affected": "8.0"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*"
            ],
            "vendor_product": "opensuse:leap",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "42.1"
                  },
                  {
                    "last_affected": "42.1"
                  },
                  {
                    "introduced": "42.2"
                  },
                  {
                    "last_affected": "42.2"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*"
            ],
            "vendor_product": "opensuse:opensuse",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "13.2"
                  },
                  {
                    "last_affected": "13.2"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:database_server",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "18c"
                  },
                  {
                    "last_affected": "18c"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
              "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
              "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:jdk",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "1.6.0-update161"
                  },
                  {
                    "last_affected": "1.6.0-update161"
                  },
                  {
                    "introduced": "1.7.0-update151"
                  },
                  {
                    "last_affected": "1.7.0-update151"
                  },
                  {
                    "introduced": "1.8.0-update144"
                  },
                  {
                    "last_affected": "1.8.0-update144"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
              "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
              "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:jre",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "1.6.0-update161"
                  },
                  {
                    "last_affected": "1.6.0-update161"
                  },
                  {
                    "introduced": "1.7.0-update151"
                  },
                  {
                    "last_affected": "1.7.0-update151"
                  },
                  {
                    "introduced": "1.8.0-update144"
                  },
                  {
                    "last_affected": "1.8.0-update144"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:enterprise_linux_desktop",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "6.0"
                  },
                  {
                    "last_affected": "6.0"
                  },
                  {
                    "introduced": "7.0"
                  },
                  {
                    "last_affected": "7.0"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:enterprise_linux_eus",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "7.4"
                  },
                  {
                    "last_affected": "7.4"
                  },
                  {
                    "introduced": "7.5"
                  },
                  {
                    "last_affected": "7.5"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:enterprise_linux_server",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "6.0"
                  },
                  {
                    "last_affected": "6.0"
                  },
                  {
                    "introduced": "7.0"
                  },
                  {
                    "last_affected": "7.0"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:enterprise_linux_workstation",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "6.0"
                  },
                  {
                    "last_affected": "6.0"
                  },
                  {
                    "introduced": "7.0"
                  },
                  {
                    "last_affected": "7.0"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:satellite",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "5.8"
                  },
                  {
                    "last_affected": "5.8"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          }
        ]
      }
    },
    "related_cves": [
      {
        "value": "CVE-2016-9843",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 442976,
  "published_at": "2017-05-23T04:29:01.9+00:00"
}