Skip to content
OpenAdvisories
Unscored CVE-2016-9843 EUVD-2016-10643GHSA-q27x-567x-5347

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving bi…

Published May 23, 2017 · Updated Aug 6, 2024 · Assigned by microfocus

Description

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 rsync 3.1.3-6 —
Debian 14 zlib 1:1.2.8.dfsg-3 —
Debian 13 rsync 3.1.3-6 —
Debian 13 zlib 1:1.2.8.dfsg-3 —
Debian 12 rsync 3.1.3-6 —
Debian 12 zlib 1:1.2.8.dfsg-3 —
Debian 8 rsync 3.1.1-3+deb8u2 DLA-1725-1
Debian 8 zlib 1:1.2.8.dfsg-2+deb8u1 DLA-2085-1
ReleasePackageFixed inAdvisory
Ubuntu 26.10 klibc 2.0.14-1ubuntu2 —
Ubuntu 26.10 zsync No fix yet —
Ubuntu 26.04 LTS klibc 2.0.14-1ubuntu2 —
Ubuntu 26.04 LTS zsync No fix yet —
Ubuntu 25.10 klibc 2.0.14-1ubuntu1.1 —
Ubuntu 25.10 zsync No fix yet —
Ubuntu 24.04 LTS klibc 2.0.13-4ubuntu0.2 —
Ubuntu 24.04 LTS zsync No fix yet —
Ubuntu 22.04 LTS klibc 2.0.10-4ubuntu0.2 —
Ubuntu 22.04 LTS zsync No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS rsync 3.1.3-6 —
Ubuntu 20.04 LTS zsync No fix yet —
Ubuntu 18.04 LTS rsync 3.1.2-2.1ubuntu1.1 USN-4292-1
Ubuntu 18.04 LTS zsync No fix yet —
Ubuntu 16.04 LTS rsync 3.1.1-3ubuntu1.3 USN-4292-1
Ubuntu 16.04 LTS zlib 1:1.2.8.dfsg-2ubuntu4.3 USN-4246-1
Ubuntu 16.04 LTS zsync No fix yet —
Ubuntu Pro 20.04 LTS klibc 2.0.7-1ubuntu5.2+esm1 —
Ubuntu Pro 18.04 LTS klibc 2.0.4-9ubuntu2.2+esm2 —
Ubuntu Pro 16.04 LTS klibc 2.0.4-8ubuntu1.16.04.4+esm3 —
Ubuntu Pro 14.04 LTS klibc 2.0.3-0ubuntu1.14.04.3+esm4 —
Ubuntu Pro 14.04 LTS zlib No fix yet —
ReleasePackageFixed inAdvisory
RHEL 7 java-1.7.1-ibm +5 1:1.7.1.4.5-1jpp.1.el7_3 RHSA-2017:1221
RHEL 7 java-1.8.0-ibm +5 1:1.8.0.4.5-1jpp.1.el7_3 RHSA-2017:1220
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.16.45-1jpp.1.el6_9 RHSA-2017:1222
RHEL 6 java-1.7.1-ibm +5 1:1.7.1.4.5-1jpp.2.el6_9 RHSA-2017:1221
RHEL 6 java-1.8.0-ibm +5 1:1.8.0.4.5-1jpp.1.el6_9 RHSA-2017:1220
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Oracle Java 7 java-1.6.0-sun +5 1:1.6.0.171-1jpp.4.el7 RHSA-2017:3047
Red Hat Rhel Extras Oracle Java 7 java-1.7.0-oracle +5 1:1.7.0.161-1jpp.4.el7 RHSA-2017:3046
Red Hat Rhel Extras Oracle Java 7 java-1.8.0-oracle +5 1:1.8.0.151-1jpp.5.el7 RHSA-2017:2999
Red Hat Rhel Extras Oracle Java 6 java-1.6.0-sun +5 1:1.6.0.171-1jpp.4.el6 RHSA-2017:3047
Red Hat Rhel Extras Oracle Java 6 java-1.7.0-oracle +5 1:1.7.0.161-1jpp.3.el6 RHSA-2017:3046
Red Hat Rhel Extras Oracle Java 6 java-1.8.0-oracle +5 1:1.8.0.151-1jpp.1.el6 RHSA-2017:2999
Red Hat Network Satellite 5 java-1.8.0-ibm +1 1:1.8.0.5.5-1jpp.1.el6_9 RHSA-2017:3453
ReleasePackageFixed inAdvisory
SLES 15 SP1 mariadb104 10.4.30-150100.3.5.10 SUSE-RU-2023:3956-1
SLES 15 SP1 python-mysqlclient 1.4.6-150100.3.3.7 SUSE-RU-2023:3956-1
SLES 15 mariadb 10.2.22-3.14.1 SUSE-SU-2019:0555-1
SLES 12 SP5 lz4 1.8.0-3.5.2 SUSE-RU-2023:4991-1
SLES 12 SP5 mariadb-connector-c 3.1.22-2.35.1 SUSE-RU-2023:4991-1
SLES 12 SP5 mariadb104 10.4.30-8.5.46 SUSE-RU-2023:4991-1
SLES 12 SP5 python-mysqlclient 1.3.14-8.9.2 SUSE-RU-2023:4991-1
SLES 12 SP4 mariadb 10.2.21-3.7.1 SUSE-SU-2019:0119-1
SLES 12 SP4 mariadb-100 10.0.37-2.3.1 SUSE-SU-2018:4211-1
SLES 12 SP3 java-1_7_0-openjdk 1.7.0.161-43.7.6 SUSE-SU-2018:0005-1
SLES 12 SP3 java-1_8_0-openjdk 1.8.0.151-27.8.1 SUSE-SU-2017:2989-1
Show 22 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 java-1_7_0-openjdk 1.7.0.161-43.7.6 SUSE-SU-2018:0005-1
SLES 12 SP2 java-1_7_1-ibm 1.7.1_sr4.5-37.1 SUSE-SU-2017:1385-1
SLES 12 SP2 java-1_8_0-ibm 1.8.0_sr4.5-29.1 SUSE-SU-2017:1386-1
SLES 12 SP2 java-1_8_0-openjdk 1.8.0.151-27.8.1 SUSE-SU-2017:2989-1
SLES 12 SP2 mariadb 10.0.38-29.27.3 SUSE-SU-2019:2048-1
SLES 12 SP2 zlib 1.2.8-11.1 SUSE-SU-2017:0003-1
SLES 12 SP1 java-1_7_0-openjdk 1.7.0.161-43.7.6 SUSE-SU-2018:0005-1
SLES 12 SP1 java-1_7_1-ibm 1.7.1_sr4.5-37.1 SUSE-SU-2017:1385-1
SLES 12 SP1 java-1_8_0-ibm 1.8.0_sr4.5-29.1 SUSE-SU-2017:1386-1
SLES 12 SP1 java-1_8_0-openjdk 1.8.0.151-27.8.1 SUSE-SU-2017:2989-1
SLES 12 SP1 mariadb 10.0.38-29.27.3 SUSE-SU-2019:2048-1
SLES 12 SP1 zlib 1.2.8-6.3.1 SUSE-SU-2017:0004-1
SLES 12 java-1_6_0-ibm 1.6.0_sr16.45-49.1 SUSE-SU-2017:1389-1
SLES 12 java-1_7_0-openjdk 1.7.0.161-43.7.6 SUSE-SU-2018:0005-1
SLES 12 java-1_7_1-ibm 1.7.1_sr4.5-37.1 SUSE-SU-2017:1385-1
SLES 12 mariadb 10.0.37-20.49.2 SUSE-SU-2018:3972-1
SLES 11 SP4 java-1_7_1-ibm 1.7.1_sr4.5-25.1 SUSE-SU-2017:1387-1
SLES 11 SP4 mysql 5.5.62-0.39.18.1 SUSE-SU-2018:3542-1
SLES 11 SP4 zlib 1.2.7-0.14.1 SUSE-SU-2016:3209-1
SLES 11 SP3 java-1_6_0-ibm 1.6.0_sr16.45-84.1 SUSE-SU-2017:1444-1
SLES 11 SP3 java-1_7_0-ibm 1.7.0_sr10.5-64.1 SUSE-SU-2017:1384-1
SLES 11 SP3 mysql 5.5.62-0.39.18.1 SUSE-SU-2018:3542-1
SUSE Studio Onsite 1.3 zlib 1.2.7-0.135.3.1 SUSE-SU-2018:1815-1
SLES for SAP 15 SP1 mariadb104 10.4.30-150100.3.5.10 SUSE-RU-2023:3956-1
SLES for SAP 15 SP1 python-mysqlclient 1.4.6-150100.3.3.7 SUSE-RU-2023:3956-1
SLES for SAP 12 SP5 lz4 1.8.0-3.5.2 SUSE-RU-2023:4991-1
SLES for SAP 12 SP5 mariadb-connector-c 3.1.22-2.35.1 SUSE-RU-2023:4991-1
SLES for SAP 12 SP5 mariadb104 10.4.30-8.5.46 SUSE-RU-2023:4991-1
SLES for SAP 12 SP5 python-mysqlclient 1.3.14-8.9.2 SUSE-RU-2023:4991-1
SLES for SAP 12 SP4 mariadb 10.2.21-3.7.1 SUSE-SU-2019:0119-1
SLES for SAP 12 SP4 mariadb-100 10.0.37-2.3.1 SUSE-SU-2018:4211-1
SLES for SAP 12 SP3 java-1_7_0-openjdk 1.7.0.161-43.7.6 SUSE-SU-2018:0005-1
SLES for SAP 12 SP3 java-1_8_0-openjdk 1.8.0.151-27.8.1 SUSE-SU-2017:2989-1
SLES for SAP 12 SP2 java-1_7_0-openjdk 1.7.0.161-43.7.6 SUSE-SU-2018:0005-1
SLES for SAP 12 SP2 java-1_7_1-ibm 1.7.1_sr4.5-37.1 SUSE-SU-2017:1385-1
SLES for SAP 12 SP2 java-1_8_0-ibm 1.8.0_sr4.5-29.1 SUSE-SU-2017:1386-1
SLES for SAP 12 SP2 java-1_8_0-openjdk 1.8.0.151-27.8.1 SUSE-SU-2017:2989-1
SLES for SAP 12 SP2 mariadb 10.0.38-29.27.3 SUSE-SU-2019:2048-1
SLES for SAP 12 SP2 zlib 1.2.8-11.1 SUSE-SU-2017:0003-1
SLES for SAP 12 SP1 java-1_7_0-openjdk 1.7.0.161-43.7.6 SUSE-SU-2018:0005-1
SLES for SAP 12 SP1 java-1_7_1-ibm 1.7.1_sr4.5-37.1 SUSE-SU-2017:1385-1
SLES for SAP 12 SP1 java-1_8_0-ibm 1.8.0_sr4.5-29.1 SUSE-SU-2017:1386-1
SLES for SAP 12 SP1 java-1_8_0-openjdk 1.8.0.151-27.8.1 SUSE-SU-2017:2989-1
SLES for SAP 12 SP1 zlib 1.2.8-6.3.1 SUSE-SU-2017:0004-1
SLES for SAP 12 java-1_7_0-openjdk 1.7.0.161-43.7.6 SUSE-SU-2018:0005-1
SLES for SAP 12 java-1_7_1-ibm 1.7.1_sr4.5-37.1 SUSE-SU-2017:1385-1
SLES for SAP 11 SP4 java-1_7_1-ibm 1.7.1_sr4.5-25.1 SUSE-SU-2017:1387-1
SLES for SAP 11 SP4 mysql 5.5.62-0.39.18.1 SUSE-SU-2018:3542-1
SLES for SAP 11 SP4 zlib 1.2.7-0.14.1 SUSE-SU-2016:3209-1
SLE HPC 15 SP1 mariadb104 10.4.30-150100.3.5.10 SUSE-RU-2023:3956-1
SLE HPC 15 SP1 python-mysqlclient 1.4.6-150100.3.3.7 SUSE-RU-2023:3956-1
SUSE OpenStack Cloud Crowbar 8 galera-3 25.3.24-4.3.1 SUSE-SU-2019:0628-1
SUSE OpenStack Cloud Crowbar 8 mariadb 10.0.38-29.27.3 SUSE-SU-2019:2048-1, SUSE-SU-2019:0628-1
SUSE OpenStack Cloud Crowbar 8 mariadb-connector-c 3.0.6-3.6.1 SUSE-SU-2019:0628-1
SUSE OpenStack Cloud 8 galera-3 25.3.24-4.3.1 SUSE-SU-2019:0628-1
SUSE OpenStack Cloud 8 mariadb 10.0.38-29.27.3 SUSE-SU-2019:2048-1, SUSE-SU-2019:0628-1
SUSE OpenStack Cloud 8 mariadb-connector-c 3.0.6-3.6.1 SUSE-SU-2019:0628-1
SUSE OpenStack Cloud 7 mariadb 10.0.38-29.27.3 SUSE-SU-2019:2048-1, SUSE-SU-2019:1441-1
SUSE OpenStack Cloud 7 mariadb-connector-c 3.0.7-1.6.1 SUSE-SU-2019:1441-1
SUSE OpenStack Cloud 6 java-1_7_0-openjdk 1.7.0.161-43.7.6 SUSE-SU-2018:0005-1
SUSE OpenStack Cloud 6 java-1_8_0-openjdk 1.8.0.151-27.8.1 SUSE-SU-2017:2989-1
SUSE Linux Enterprise Point of Sale 11 SP3 java-1_6_0-ibm 1.6.0_sr16.45-84.1 SUSE-SU-2017:1444-1
SUSE Linux Enterprise Point of Sale 11 SP3 java-1_7_0-ibm 1.7.0_sr10.5-64.1 SUSE-SU-2017:1384-1
SUSE Linux Enterprise Point of Sale 11 SP3 mysql 5.5.62-0.39.18.1 SUSE-SU-2018:3542-1
SUSE HPE Helion OpenStack 8 galera-3 25.3.24-4.3.1 SUSE-SU-2019:0628-1
SUSE HPE Helion OpenStack 8 mariadb 10.0.38-29.27.3 SUSE-SU-2019:2048-1, SUSE-SU-2019:0628-1
SUSE HPE Helion OpenStack 8 mariadb-connector-c 3.0.6-3.6.1 SUSE-SU-2019:0628-1
SUSE Enterprise Storage 4 mariadb 10.0.38-29.27.3 SUSE-SU-2019:2048-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed java-1_8_0-openjdk 1.8.0.302-2.2 openSUSE-SU-2024:10876-1
openSUSE Tumbleweed perl-Compress-Raw-Zlib 2.213-1.1 openSUSE-SU-2025:14656-1
openSUSE Leap 15.0 mariadb 10.2.22-lp150.2.9.1 openSUSE-SU-2019:0327-1
ReleasePackageFixed inAdvisory
Alpine v3.24 mariadb 10.3.11-r0 —
Alpine v3.23 mariadb 10.3.11-r0 —
Alpine v3.22 mariadb 10.3.11-r0 —
Alpine v3.21 mariadb 10.3.11-r0 —
Alpine v3.20 mariadb 10.3.11-r0 —
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 mariadb 10.3.11-r0 —
Alpine v3.18 mariadb 10.3.11-r0 —
Alpine v3.17 mariadb 10.3.11-r0 —
Alpine v3.16 mariadb 10.3.11-r0 —
Alpine v3.15 mariadb 10.3.11-r0 —
Alpine v3.14 mariadb 10.3.11-r0 —
Alpine v3.13 mariadb 10.3.11-r0 —
Alpine v3.12 mariadb 10.3.11-r0 —
Alpine v3.11 mariadb 10.3.11-r0 —
Alpine v3.10 mariadb 10.3.11-r0 —
Alpine v3.9 mariadb 10.3.11-r0 —
Alpine v3.8 mariadb 10.2.19-r0 —
Alpine v3.7 mariadb 10.1.37-r0 —
Alpine v3.6 mariadb 10.1.37-r0 —
Alpine v3.6 perl 5.24.3-r1 —
Alpine v3.5 perl 5.24.3-r1 —
Alpine v3.5 zlib 1.2.11-r0 —
Alpine v3.4 zlib 1.2.11-r0 —
Alpine v3.3 zlib 1.2.11-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 mariadb +7 1:5.5.62-1.amzn2.0.1 ALAS2-2019-1193

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 fltk 1.3.8-1 —
Azure Linux 3 openjpeg2 No fix yet —

Advisories 42

References