COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2016-9841

CVE-2016-9841

Severity
critical
Source
NVD · cve
Published
2017-05-23
CVSS
9.8
Reference
https://nvd.nist.gov/vuln/detail/CVE-2016-9841

Players implicated

NetApp · vendorOracle · vendorapple · vendorcanonical · vendordebian · vendornodejs · vendoropensuse · vendorredhat · vendorzlib · vendoractive iq unified manager · productcloud backup · productdatabase server · productdebian linux · producte-series santricity management · producte-series santricity os controller · producte-series santricity storage manager · producte-series santricity web services · productenterprise linux desktop · productenterprise linux eus · productenterprise linux server · productenterprise linux workstation · producthci storage node · productiphone os · productjdk · productjre · productleap · productmac os x · productmysql · productnode.js · productoncommand balance · productoncommand insight · productoncommand performance manager · productoncommand shift · productoncommand unified manager · productoncommand workflow automation · productopensuse · productsatellite · productsnapmanager · productsolidfire · productsteelstore cloud integrated storage · productstorage replication adapter for clustered data ontap · productsymantec netbackup · producttvos · productubuntu linux · productvasa provider for clustered data ontap · productvirtual storage console · productwatchos · productzlib · product

Description

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Sentiment · trusted sources

Affected FedRAMP products 11 in the catalog

ProductProviderStatusMatch
Aconex for Defense Oracle Authorized vendor-exact · 0.90
Cloud Insights NetApp In Process vendor-exact · 0.90
Federal Managed Cloud Services Oracle Authorized vendor-exact · 0.90
Fusion Cloud Oracle Authorized vendor-exact · 0.90
Government Cloud - Common Controls Oracle Authorized vendor-exact · 0.90
Oracle Cloud Infrastructure-Government Cloud Oracle Authorized vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM) Oracle Authorized vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM) - Moderate Oracle In Process vendor-exact · 0.90
Oracle Service Cloud Oracle Authorized vendor-exact · 0.90
Oracle Service Cloud (DOD) Oracle Authorized vendor-exact · 0.90
Taleo Cloud - U.S. Government Cloud Oracle Authorized vendor-exact · 0.90