CVE catalog

CVE-2016-9840

klibc vulnerabilities

Severity: High · CVSS 8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published: Dec 21, 2016, 3:25:07 PM UTC
Source: [NVD] · [CVE record]
EPSS: 4.88% · Oct 22, 2026

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	zlib	sid	`1:1.3.dfsg+really1.3.2-3`	fixed
Debian	zlib	forky	`1:1.3.dfsg+really1.3.2-3`	fixed
Debian	zlib	trixie	`1:1.3.dfsg+really1.3.1-1`	fixed
Debian	zlib	bookworm	`1:1.2.13.dfsg-1`	fixed
Debian	rsync	sid	`3.5.1+ds1-2`	fixed
Debian	rsync	forky	`3.5.1+ds1-2`	fixed
Debian	rsync	trixie	`3.4.1+ds1-5+deb13u4`	fixed
Debian	rsync	trixie-security	`3.5.0+ds1-0+deb13u1`	fixed
Debian	rsync	bookworm	`3.2.7-1+deb12u6`	fixed
Debian	rsync	bookworm-security	`3.2.7-1+deb12u5`	fixed
Ubuntu	rsync	noble	`3.1.3-6`	fixed
Ubuntu	klibc	noble	`2.0.13-4ubuntu0.1`	fixed
Ubuntu	klibc-utils	noble	`2.0.13-4ubuntu0.1`	fixed
Ubuntu	libklibc	noble	`2.0.13-4ubuntu0.1`	fixed
Ubuntu	libklibc-dev	noble	`2.0.13-4ubuntu0.1`	fixed
Cpe	boost	Not reported	`1.78.0`	fixed
Cpe	zlib	Not reported	`1.2.9`	fixed
Cpe	leap	Not reported	Not reported	unknown
Cpe	opensuse	Not reported	Not reported	unknown
Cpe	debian_linux	Not reported	Not reported	unknown
Cpe	ubuntu_linux	Not reported	Not reported	unknown
Cpe	database_server	Not reported	Not reported	unknown
Cpe	jdk	Not reported	Not reported	unknown
Cpe	jre	Not reported	Not reported	unknown
Cpe	mysql	Not reported	Not reported	unknown
Cpe	satellite	Not reported	Not reported	unknown
Alpine	perl	3.5	`5.24.3-r1`	fixed
Alpine	perl	3.6	`5.24.3-r1`	fixed
Alpine	zlib	3.3	`1.2.11-r0`	fixed
Alpine	zlib	3.4	`1.2.11-r0`	fixed
Alpine	zlib	3.5	`1.2.11-r0`	fixed
Ubuntu	klibc	pro	`2.0.4-9ubuntu1`	vulnerable
Ubuntu	klibc	pro	`2.0.4-9ubuntu2`	vulnerable
Ubuntu	klibc	pro	`2.0.4-9ubuntu2.1`	vulnerable
Ubuntu	klibc	pro	`2.0.4-9ubuntu2.2`	vulnerable
Ubuntu	klibc	pro	`2.0.4-9ubuntu2.2+esm1`	fixed
Ubuntu	klibc	20.04	`2.0.6-1ubuntu1`	vulnerable
Ubuntu	klibc	20.04	`2.0.6-1ubuntu2`	vulnerable
Ubuntu	klibc	20.04	`2.0.7-1ubuntu1`	vulnerable
Ubuntu	klibc	20.04	`2.0.7-1ubuntu3`	vulnerable
Ubuntu	klibc	20.04	`2.0.7-1ubuntu4`	vulnerable
Ubuntu	klibc	20.04	`2.0.7-1ubuntu5`	vulnerable
Ubuntu	klibc	20.04	`2.0.7-1ubuntu5.1`	vulnerable
Ubuntu	klibc	20.04	`2.0.7-1ubuntu5.2`	fixed
Ubuntu	klibc	22.04	`2.0.8-6.1ubuntu2`	vulnerable
Ubuntu	klibc	22.04	`2.0.10-3`	vulnerable
Ubuntu	klibc	22.04	`2.0.10-4`	vulnerable
Ubuntu	klibc	22.04	`2.0.10-4ubuntu0.1`	fixed
Ubuntu	klibc	24.04	`2.0.13-1`	vulnerable
Ubuntu	klibc	24.04	`2.0.13-2`	vulnerable
Ubuntu	klibc	24.04	`2.0.13-2ubuntu1`	vulnerable
Ubuntu	klibc	24.04	`2.0.13-4`	vulnerable
Ubuntu	klibc	24.04	`2.0.13-4ubuntu0.1`	fixed
Ubuntu	rsync	16.04	`3.1.1-3`	vulnerable
Ubuntu	rsync	16.04	`3.1.1-3ubuntu1`	vulnerable
Ubuntu	rsync	16.04	`3.1.1-3ubuntu1.1`	vulnerable
Ubuntu	rsync	16.04	`3.1.1-3ubuntu1.2`	vulnerable
Ubuntu	rsync	16.04	`3.1.1-3ubuntu1.3`	fixed
Ubuntu	rsync	18.04	`3.1.2-2`	vulnerable
Ubuntu	rsync	18.04	`3.1.2-2.1`	vulnerable
Ubuntu	rsync	18.04	`3.1.2-2.1ubuntu1`	vulnerable
Ubuntu	rsync	18.04	`3.1.2-2.1ubuntu1.1`	fixed
Ubuntu	zlib	16.04	`1:1.2.8.dfsg-2ubuntu4`	vulnerable
Ubuntu	zlib	16.04	`1:1.2.8.dfsg-2ubuntu4.1`	vulnerable
Ubuntu	zlib	16.04	`1:1.2.8.dfsg-2ubuntu4.3`	fixed
Suse	boost-base	linux enterprise micro 5.3	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise micro 5.4	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise micro 5.5	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise module for basesystem 15 sp6	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise module for basesystem 15 sp6	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise module for basesystem 15 sp7	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise module for basesystem 15 sp7	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise module for legacy 15 sp6	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise module for legacy 15 sp7	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise module for package hub 15 sp6	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise module for package hub 15 sp7	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise high performance computing 15 sp3-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise high performance computing 15 sp3-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise high performance computing 15 sp4-espos	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise high performance computing 15 sp4-espos	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise high performance computing 15 sp4-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise high performance computing 15 sp4-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise high performance computing 15 sp5-espos	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise high performance computing 15 sp5-espos	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise high performance computing 15 sp5-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise high performance computing 15 sp5-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise server 15 sp3-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise server 15 sp3-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise server 15 sp4-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise server 15 sp4-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise server 15 sp5-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise server 15 sp5-ltss	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise server for sap applications 15 sp3	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise server for sap applications 15 sp3	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise server for sap applications 15 sp4	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise server for sap applications 15 sp4	`1.66.0-150200.12.7.1`	fixed
Suse	boost	linux enterprise server for sap applications 15 sp5	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise server for sap applications 15 sp5	`1.66.0-150200.12.7.1`	fixed
Suse	boost	manager proxy 4.3	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	manager proxy 4.3	`1.66.0-150200.12.7.1`	fixed
Suse	boost	manager server 4.3	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	manager server 4.3	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise micro 5.1	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	linux enterprise micro 5.2	`1.66.0-150200.12.7.1`	fixed
Suse	boost	enterprise storage 7.1	`1.66.0-150200.12.7.1`	fixed
Suse	boost-base	enterprise storage 7.1	`1.66.0-150200.12.7.1`	fixed
Opensuse	boost	leap 15.6	`1.66.0-150200.12.7.1`	fixed
Opensuse	boost-base	leap 15.6	`1.66.0-150200.12.7.1`	fixed
Suse	zlib	studio onsite 1.3	`1.2.7-0.135.3.1`	fixed
Suse	zlib	linux enterprise desktop 12 sp2	`1.2.8-11.1`	fixed
Suse	zlib	linux enterprise server for raspberry pi 12 sp2	`1.2.8-11.1`	fixed
Suse	zlib	linux enterprise software development kit 12 sp2	`1.2.8-11.1`	fixed
Suse	zlib	linux enterprise server 12 sp2	`1.2.8-11.1`	fixed
Suse	zlib	linux enterprise server for sap applications 12 sp2	`1.2.8-11.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise software development kit 11 sp4	`1.7.1_sr4.5-25.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server 11 sp4	`1.7.1_sr4.5-25.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server for sap applications 11 sp4	`1.7.1_sr4.5-25.1`	fixed
Suse	zlib	linux enterprise software development kit 11 sp4	`1.2.7-0.14.1`	fixed
Suse	zlib	linux enterprise server 11 sp4	`1.2.7-0.14.1`	fixed
Suse	zlib	linux enterprise server for sap applications 11 sp4	`1.2.7-0.14.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise software development kit 12 sp1	`1.8.0_sr4.5-29.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise software development kit 12 sp2	`1.8.0_sr4.5-29.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 12 sp1	`1.8.0_sr4.5-29.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server for sap applications 12 sp1	`1.8.0_sr4.5-29.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 12 sp2	`1.8.0_sr4.5-29.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server for sap applications 12 sp2	`1.8.0_sr4.5-29.1`	fixed
Suse	java-1_7_0-ibm	linux enterprise point of sale 11 sp3	`1.7.0_sr10.5-64.1`	fixed
Suse	java-1_7_0-ibm	linux enterprise server 11 sp3-ltss	`1.7.0_sr10.5-64.1`	fixed
Suse	java-1_7_0-ibm	linux enterprise server 11 sp3-teradata	`1.7.0_sr10.5-64.1`	fixed
Suse	zlib	linux enterprise desktop 12 sp1	`1.2.8-6.3.1`	fixed
Suse	zlib	linux enterprise software development kit 12 sp1	`1.2.8-6.3.1`	fixed
Suse	zlib	linux enterprise server 12 sp1	`1.2.8-6.3.1`	fixed
Suse	zlib	linux enterprise server for sap applications 12 sp1	`1.2.8-6.3.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server for sap applications 12	`1.7.1_sr4.5-37.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise software development kit 12 sp1	`1.7.1_sr4.5-37.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise software development kit 12 sp2	`1.7.1_sr4.5-37.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server 12-ltss	`1.7.1_sr4.5-37.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server 12 sp1	`1.7.1_sr4.5-37.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server for sap applications 12 sp1	`1.7.1_sr4.5-37.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server 12 sp2	`1.7.1_sr4.5-37.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server for sap applications 12 sp2	`1.7.1_sr4.5-37.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	zlib	source	sid	`1:1.2.8.dfsg-3`	not yet assigned	Not reported	[847270]
Debian	zlib	source	forky	`1:1.2.8.dfsg-3`	not yet assigned	Not reported	[847270]
Debian	zlib	source	trixie	`1:1.2.8.dfsg-3`	not yet assigned	Not reported	[847270]
Debian	zlib	source	bookworm	`1:1.2.8.dfsg-3`	not yet assigned	Not reported	[847270]
Debian	rsync	source	sid	`3.1.3-6`	not yet assigned	Not reported	[924509]
Debian	rsync	source	forky	`3.1.3-6`	not yet assigned	Not reported	[924509]
Debian	rsync	source	trixie	`3.1.3-6`	not yet assigned	Not reported	[924509]
Debian	rsync	source	bookworm	`3.1.3-6`	not yet assigned	Not reported	[924509]
Ubuntu	rsync	deb	noble	`3.1.3-6`	Not reported	Not reported	Not reported
Ubuntu	klibc	deb	noble	`2.0.13-4ubuntu0.1`	Not reported	Not reported	Not reported
Ubuntu	klibc-utils	deb	noble	`2.0.13-4ubuntu0.1`	Not reported	Not reported	Not reported
Ubuntu	libklibc	deb	noble	`2.0.13-4ubuntu0.1`	Not reported	Not reported	Not reported
Ubuntu	libklibc-dev	deb	noble	`2.0.13-4ubuntu0.1`	Not reported	Not reported	Not reported
Cpe	boost	cpe	Not reported	`1.78.0`	Not reported	NVD-CVE-2016-9840	Not reported
Cpe	zlib	cpe	Not reported	`1.2.9`	Not reported	NVD-CVE-2016-9840	Not reported
Alpine	perl	apk	3.5	`5.24.3-r1`	Not reported	ALPINE-CVE-2016-9840	Not reported
Alpine	perl	apk	3.6	`5.24.3-r1`	Not reported	ALPINE-CVE-2016-9840	Not reported
Alpine	zlib	apk	3.3	`1.2.11-r0`	Not reported	ALPINE-CVE-2016-9840	Not reported
Alpine	zlib	apk	3.4	`1.2.11-r0`	Not reported	ALPINE-CVE-2016-9840	Not reported
Alpine	zlib	apk	3.5	`1.2.11-r0`	Not reported	ALPINE-CVE-2016-9840	Not reported
Ubuntu	klibc	deb	pro	`2.0.4-9ubuntu2.2+esm1`	Not reported	USN-6736-1	Not reported
Ubuntu	klibc	deb	20.04	`2.0.7-1ubuntu5.2`	Not reported	USN-6736-1	Not reported
Ubuntu	klibc	deb	22.04	`2.0.10-4ubuntu0.1`	Not reported	USN-6736-1	Not reported
Ubuntu	klibc	deb	24.04	`2.0.13-4ubuntu0.1`	Not reported	USN-6736-2	Not reported
Ubuntu	rsync	deb	16.04	`3.1.1-3ubuntu1.3`	Not reported	USN-4292-1	Not reported
Ubuntu	rsync	deb	18.04	`3.1.2-2.1ubuntu1.1`	Not reported	USN-4292-1	Not reported
Ubuntu	zlib	deb	16.04	`1:1.2.8.dfsg-2ubuntu4.3`	Not reported	USN-4246-1	Not reported
Suse	boost-base	rpm	linux enterprise micro 5.3	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise micro 5.4	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise micro 5.5	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise module for basesystem 15 sp6	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise module for basesystem 15 sp6	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise module for basesystem 15 sp7	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise module for basesystem 15 sp7	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise module for legacy 15 sp6	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise module for legacy 15 sp7	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise module for package hub 15 sp6	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise module for package hub 15 sp7	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise high performance computing 15 sp3-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise high performance computing 15 sp3-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise high performance computing 15 sp4-espos	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise high performance computing 15 sp4-espos	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise high performance computing 15 sp4-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise high performance computing 15 sp4-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise high performance computing 15 sp5-espos	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise high performance computing 15 sp5-espos	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise high performance computing 15 sp5-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise high performance computing 15 sp5-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise server 15 sp3-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise server 15 sp3-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise server 15 sp4-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise server 15 sp4-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise server 15 sp5-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise server 15 sp5-ltss	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise server for sap applications 15 sp3	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise server for sap applications 15 sp3	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise server for sap applications 15 sp4	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise server for sap applications 15 sp4	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	linux enterprise server for sap applications 15 sp5	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise server for sap applications 15 sp5	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	manager proxy 4.3	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	manager proxy 4.3	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	manager server 4.3	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	manager server 4.3	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise micro 5.1	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	linux enterprise micro 5.2	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost	rpm	enterprise storage 7.1	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	boost-base	rpm	enterprise storage 7.1	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Opensuse	boost	rpm	leap 15.6	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Opensuse	boost-base	rpm	leap 15.6	`1.66.0-150200.12.7.1`	Not reported	SUSE-SU-2025:02536-1	Not reported
Suse	zlib	rpm	studio onsite 1.3	`1.2.7-0.135.3.1`	Not reported	SUSE-SU-2018:1815-1	Not reported
Suse	zlib	rpm	linux enterprise desktop 12 sp2	`1.2.8-11.1`	Not reported	SUSE-SU-2017:0003-1	Not reported
Suse	zlib	rpm	linux enterprise server for raspberry pi 12 sp2	`1.2.8-11.1`	Not reported	SUSE-SU-2017:0003-1	Not reported
Suse	zlib	rpm	linux enterprise software development kit 12 sp2	`1.2.8-11.1`	Not reported	SUSE-SU-2017:0003-1	Not reported
Suse	zlib	rpm	linux enterprise server 12 sp2	`1.2.8-11.1`	Not reported	SUSE-SU-2017:0003-1	Not reported
Suse	zlib	rpm	linux enterprise server for sap applications 12 sp2	`1.2.8-11.1`	Not reported	SUSE-SU-2017:0003-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise software development kit 11 sp4	`1.7.1_sr4.5-25.1`	Not reported	SUSE-SU-2017:1387-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server 11 sp4	`1.7.1_sr4.5-25.1`	Not reported	SUSE-SU-2017:1387-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server for sap applications 11 sp4	`1.7.1_sr4.5-25.1`	Not reported	SUSE-SU-2017:1387-1	Not reported
Suse	zlib	rpm	linux enterprise software development kit 11 sp4	`1.2.7-0.14.1`	Not reported	SUSE-SU-2016:3209-1	Not reported
Suse	zlib	rpm	linux enterprise server 11 sp4	`1.2.7-0.14.1`	Not reported	SUSE-SU-2016:3209-1	Not reported
Suse	zlib	rpm	linux enterprise server for sap applications 11 sp4	`1.2.7-0.14.1`	Not reported	SUSE-SU-2016:3209-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise software development kit 12 sp1	`1.8.0_sr4.5-29.1`	Not reported	SUSE-SU-2017:1386-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise software development kit 12 sp2	`1.8.0_sr4.5-29.1`	Not reported	SUSE-SU-2017:1386-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 12 sp1	`1.8.0_sr4.5-29.1`	Not reported	SUSE-SU-2017:1386-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server for sap applications 12 sp1	`1.8.0_sr4.5-29.1`	Not reported	SUSE-SU-2017:1386-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 12 sp2	`1.8.0_sr4.5-29.1`	Not reported	SUSE-SU-2017:1386-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server for sap applications 12 sp2	`1.8.0_sr4.5-29.1`	Not reported	SUSE-SU-2017:1386-1	Not reported
Suse	java-1_7_0-ibm	rpm	linux enterprise point of sale 11 sp3	`1.7.0_sr10.5-64.1`	Not reported	SUSE-SU-2017:1384-1	Not reported
Suse	java-1_7_0-ibm	rpm	linux enterprise server 11 sp3-ltss	`1.7.0_sr10.5-64.1`	Not reported	SUSE-SU-2017:1384-1	Not reported
Suse	java-1_7_0-ibm	rpm	linux enterprise server 11 sp3-teradata	`1.7.0_sr10.5-64.1`	Not reported	SUSE-SU-2017:1384-1	Not reported
Suse	zlib	rpm	linux enterprise desktop 12 sp1	`1.2.8-6.3.1`	Not reported	SUSE-SU-2017:0004-1	Not reported
Suse	zlib	rpm	linux enterprise software development kit 12 sp1	`1.2.8-6.3.1`	Not reported	SUSE-SU-2017:0004-1	Not reported
Suse	zlib	rpm	linux enterprise server 12 sp1	`1.2.8-6.3.1`	Not reported	SUSE-SU-2017:0004-1	Not reported
Suse	zlib	rpm	linux enterprise server for sap applications 12 sp1	`1.2.8-6.3.1`	Not reported	SUSE-SU-2017:0004-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server for sap applications 12	`1.7.1_sr4.5-37.1`	Not reported	SUSE-SU-2017:1385-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise software development kit 12 sp1	`1.7.1_sr4.5-37.1`	Not reported	SUSE-SU-2017:1385-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise software development kit 12 sp2	`1.7.1_sr4.5-37.1`	Not reported	SUSE-SU-2017:1385-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server 12-ltss	`1.7.1_sr4.5-37.1`	Not reported	SUSE-SU-2017:1385-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server 12 sp1	`1.7.1_sr4.5-37.1`	Not reported	SUSE-SU-2017:1385-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server for sap applications 12 sp1	`1.7.1_sr4.5-37.1`	Not reported	SUSE-SU-2017:1385-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server 12 sp2	`1.7.1_sr4.5-37.1`	Not reported	SUSE-SU-2017:1385-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server for sap applications 12 sp2	`1.7.1_sr4.5-37.1`	Not reported	SUSE-SU-2017:1385-1	Not reported

[Debian bug #847270][Debian bug #924509]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[lib32z1]Unknown
Source package: [zlib]
Details (1)
- 1:1.2.13.dfsg-1 · amd64 · bookworm
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · bookworm; usn · zlib · debian · 12
[lib32z1-dev]Unknown
Source package: [zlib]
Details (1)
- 1:1.2.13.dfsg-1 · amd64 · bookworm
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · bookworm; usn · zlib · debian · 12
[rsync]Unknown
Details (4)
- 3.2.7-1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 3.1.3-6
  usn · rsync · debian · bookworm; usn · rsync · debian · 12
- 3.2.7-1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 3.1.3-6
  usn · rsync · debian · bookworm; usn · rsync · debian · 12
- 3.2.7-1+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 3.1.3-6
  usn · rsync · debian · bookworm; usn · rsync · debian · 12
- 3.2.7-1+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 3.1.3-6
  usn · rsync · debian · bookworm; usn · rsync · debian · 12
[zlib1g]Unknown
Source package: [zlib]
Details (2)
- 1:1.2.13.dfsg-1 · amd64 · bookworm
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · bookworm; usn · zlib · debian · 12
- 1:1.2.13.dfsg-1 · arm64 · bookworm
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · bookworm; usn · zlib · debian · 12
[zlib1g-dev]Unknown
Source package: [zlib]
Details (2)
- 1:1.2.13.dfsg-1 · amd64 · bookworm
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · bookworm; usn · zlib · debian · 12
- 1:1.2.13.dfsg-1 · arm64 · bookworm
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · bookworm; usn · zlib · debian · 12

[Debian 13 (Trixie)]

[lib32z1]Unknown
Source package: [zlib]
Details (1)
- 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
[lib32z1-dev]Unknown
Source package: [zlib]
Details (1)
- 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
[libminizip1t64]Unknown
Source package: [zlib]
Details (2)
- 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
- 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
[libminizip-dev]Unknown
Source package: [zlib]
Details (2)
- 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
- 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
[minizip]Unknown
Source package: [zlib]
Details (2)
- 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
- 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
[rsync]Unknown
Details (5)
- 3.4.1+ds1-5+deb13u4 · amd64 · trixie
  Fixed · Fixed: 3.1.3-6
  usn · rsync · debian · 13
- 3.4.1+ds1-5+deb13u4 · arm64 · trixie
  Fixed · Fixed: 3.1.3-6
  usn · rsync · debian · 13
- 3.4.1+ds1-5+deb13u3 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.1.3-6
  usn · rsync · debian · 13
- 3.4.1+ds1-5+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 3.1.3-6
  usn · rsync · debian · 13
- 3.5.0+ds1-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 3.1.3-6
  usn · rsync · debian · 13
[zlib1g]Unknown
Source package: [zlib]
Details (2)
- 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
- 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
[zlib1g-dev]Unknown
Source package: [zlib]
Details (2)
- 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13
- 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie
  Fixed · Fixed: 1:1.2.8.dfsg-3
  usn · zlib · debian · 13

Observed: Oct 23, 2026, 5:24:18 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]