CVE-2016-9841
critical-risk
Published 2017-05-23
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
Do I need to act?
!
13.5% chance of exploitation in next 30 days
EPSS score — higher than 87% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: 2fa463bacfff79181df1a5270fb67cc679a53e71, 9aaec95e82117c1cb0f9624264c3618fc380cecb, ab4af087e83d91a46354d765306d3543b1d85423, cea049bcf8bb0f9a6e0095dbd5dffdb14dc8f71b, ea2ceac846abb279fd4d141bfe32fc4f7a6e30e0, fbc9fded2fb4caa104e55146e6fa4fc2c3d11daf, bebda6df68c71f233a2ee212b2569ae6e70b48a9
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Products (20)
References (66)
and 46 more references
70
/ 100
critical-risk
Severity
32/34 · Critical
Exploitability
12/34 · Low
Exposure
26/34 · High