UpHeron
All vulnerabilities

Servers and applications

CVE-2016-9840

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Severity
High 8.8
Published
23 May 2017
Last changed
8 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
4.8.2, 6.10.2, 7.6.0
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 4.0.0 up to 4.1.2
  • From 4.2.0 before 4.8.2
  • From 6.0.0 up to 6.8.1
  • From 6.9.0 before 6.10.2
  • From 7.0.0 before 7.6.0
JavaServers and applications · cpe:a:oracle:jdk
  • Version 1.6.0-update161
  • Version 1.7.0-update151
  • Version 1.8.0-update144
JavaServers and applications · cpe:a:oracle:jre
  • Version 1.6.0-update161
  • Version 1.7.0-update151
  • Version 1.8.0-update144
MySQLServers and applications · cpe:a:oracle:mysql
  • From 5.5.0 up to 5.5.61
  • From 5.6.0 up to 5.6.41
  • From 5.7.0 up to 5.7.23
  • From 8.0.0 up to 8.0.12

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-9840
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-9840