CVE-Katalog

CVE-2016-9843

klibc vulnerabilities

[CVE-Katalog]

Schweregrad
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
5.77% · Oct 22, 2026

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianzlibsid1:1.3.dfsg+really1.3.2-3fixed
Debianzlibforky1:1.3.dfsg+really1.3.2-3fixed
Debianzlibtrixie1:1.3.dfsg+really1.3.1-1fixed
Debianzlibbookworm1:1.2.13.dfsg-1fixed
Debianrsyncsid3.5.1+ds1-2fixed
Debianrsyncforky3.5.1+ds1-2fixed
Debianrsynctrixie3.4.1+ds1-5+deb13u4fixed
Debianrsynctrixie-security3.5.0+ds1-0+deb13u1fixed
Debianrsyncbookworm3.2.7-1+deb12u6fixed
Debianrsyncbookworm-security3.2.7-1+deb12u5fixed
Ubuntursyncnoble3.1.3-6fixed
Ubuntuklibcnoble2.0.13-4ubuntu0.2fixed
Ubuntuklibc-utilsnoble2.0.13-4ubuntu0.2fixed
Ubuntulibklibcnoble2.0.13-4ubuntu0.2fixed
Ubuntulibklibc-devnoble2.0.13-4ubuntu0.2fixed
Alpinemariadb3.1010.3.11-r0fixed
Alpinemariadb3.1110.3.11-r0fixed
Alpinemariadb3.1210.3.11-r0fixed
Alpinemariadb3.1310.3.11-r0fixed
Alpinemariadb3.1410.3.11-r0fixed
Alpinemariadb3.1510.3.11-r0fixed
Alpinemariadb3.1610.3.11-r0fixed
Alpinemariadb3.1710.3.11-r0fixed
Alpinemariadb3.1810.3.11-r0fixed
Alpinemariadb3.1910.3.11-r0fixed
Alpinemariadb3.2010.3.11-r0fixed
Alpinemariadb3.2110.3.11-r0fixed
Alpinemariadb3.2210.3.11-r0fixed
Alpinemariadb3.2310.3.11-r0fixed
Alpinemariadb3.2410.3.11-r0fixed
Alpinemariadb3.610.1.37-r0fixed
Alpinemariadb3.710.1.37-r0fixed
Alpinemariadb3.810.2.19-r0fixed
Alpinemariadb3.910.3.11-r0fixed
Alpineperl3.55.24.3-r1fixed
Alpineperl3.65.24.3-r1fixed
Alpinezlib3.31.2.11-r0fixed
Alpinezlib3.41.2.11-r0fixed
Alpinezlib3.51.2.11-r0fixed
Ubuntuklibcpro2.0.6-1ubuntu1vulnerable
Ubuntuklibcpro2.0.6-1ubuntu2vulnerable
Ubuntuklibcpro2.0.7-1ubuntu1vulnerable
Ubuntuklibcpro2.0.7-1ubuntu3vulnerable
Ubuntuklibcpro2.0.7-1ubuntu4vulnerable
Ubuntuklibcpro2.0.7-1ubuntu5vulnerable
Ubuntuklibcpro2.0.7-1ubuntu5.1vulnerable
Ubuntuklibcpro2.0.7-1ubuntu5.2vulnerable
Ubuntuklibcpro2.0.7-1ubuntu5.2+esm1fixed
Ubuntuklibc22.042.0.8-6.1ubuntu2vulnerable
Ubuntuklibc22.042.0.10-3vulnerable
Ubuntuklibc22.042.0.10-4vulnerable
Ubuntuklibc22.042.0.10-4ubuntu0.1vulnerable
Ubuntuklibc22.042.0.10-4ubuntu0.2fixed
Ubuntuklibc24.042.0.13-1vulnerable
Ubuntuklibc24.042.0.13-2vulnerable
Ubuntuklibc24.042.0.13-2ubuntu1vulnerable
Ubuntuklibc24.042.0.13-4vulnerable
Ubuntuklibc24.042.0.13-4ubuntu0.1vulnerable
Ubuntuklibc24.042.0.13-4ubuntu0.2fixed
Ubuntuklibc25.102.0.13-4ubuntu1vulnerable
Ubuntuklibc25.102.0.14-1ubuntu1vulnerable
Ubuntuklibc25.102.0.14-1ubuntu1.1fixed
Susemariadbhpe helion openstack 810.0.38-29.27.3fixed
Susemariadbopenstack cloud 710.0.38-29.27.3fixed
Susemariadbopenstack cloud 810.0.38-29.27.3fixed
Susemariadbopenstack cloud crowbar 810.0.38-29.27.3fixed
Susemariadblinux enterprise server for sap applications 12 sp210.0.38-29.27.3fixed
Susemariadblinux enterprise server 12 sp1-ltss10.0.38-29.27.3fixed
Susemariadblinux enterprise server 12 sp2-ltss10.0.38-29.27.3fixed
Susemariadblinux enterprise server 12 sp2-bcl10.0.38-29.27.3fixed
Susemariadbenterprise storage 410.0.38-29.27.3fixed
Opensusemariadbleap 15.010.2.22-lp150.2.9.1fixed
Opensuseperl-Compress-Raw-Zlibtumbleweed2.213-1.1fixed
Susemariadb-100linux enterprise desktop 12 sp410.0.37-2.3.1fixed
Susemariadb-100linux enterprise software development kit 12 sp410.0.37-2.3.1fixed
Susemariadb-100linux enterprise server 12 sp410.0.37-2.3.1fixed
Susemariadb-100linux enterprise server for sap applications 12 sp410.0.37-2.3.1fixed
Susemariadb-100linux enterprise workstation extension 12 sp410.0.37-2.3.1fixed
Susemariadblinux enterprise server 12-ltss10.0.37-20.49.2fixed
Susemysqllinux enterprise software development kit 11 sp45.5.62-0.39.18.1fixed
Susemysqllinux enterprise point of sale 11 sp35.5.62-0.39.18.1fixed
Susemysqllinux enterprise server 11 sp3-ltss5.5.62-0.39.18.1fixed
Susemysqllinux enterprise server 11 sp3-teradata5.5.62-0.39.18.1fixed
Susemysqllinux enterprise server 11 sp45.5.62-0.39.18.1fixed
Susemysqllinux enterprise server for sap applications 11 sp45.5.62-0.39.18.1fixed
Susemariadblinux enterprise module for server applications 1510.2.22-3.14.1fixed
Susegalera-3hpe helion openstack 825.3.24-4.3.1fixed
Susemariadbhpe helion openstack 810.2.21-4.8.1fixed
Susemariadb-connector-chpe helion openstack 83.0.6-3.6.1fixed
Susegalera-3openstack cloud 825.3.24-4.3.1fixed
Susemariadbopenstack cloud 810.2.21-4.8.1fixed
Susemariadb-connector-copenstack cloud 83.0.6-3.6.1fixed
Susegalera-3openstack cloud crowbar 825.3.24-4.3.1fixed
Susemariadbopenstack cloud crowbar 810.2.21-4.8.1fixed
Susemariadb-connector-copenstack cloud crowbar 83.0.6-3.6.1fixed
Susemariadblinux enterprise desktop 12 sp410.2.21-3.7.1fixed
Susemariadblinux enterprise server 12 sp410.2.21-3.7.1fixed
Susemariadblinux enterprise server for sap applications 12 sp410.2.21-3.7.1fixed
Susemariadbopenstack cloud 710.2.22-10.1fixed
Susemariadb-connector-copenstack cloud 73.0.7-1.6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianzlibsourcesid1:1.2.8.dfsg-3not yet assignedNot reported[847275]
Debianzlibsourceforky1:1.2.8.dfsg-3not yet assignedNot reported[847275]
Debianzlibsourcetrixie1:1.2.8.dfsg-3not yet assignedNot reported[847275]
Debianzlibsourcebookworm1:1.2.8.dfsg-3not yet assignedNot reported[847275]
Debianrsyncsourcesid3.1.3-6not yet assignedNot reported[924509]
Debianrsyncsourceforky3.1.3-6not yet assignedNot reported[924509]
Debianrsyncsourcetrixie3.1.3-6not yet assignedNot reported[924509]
Debianrsyncsourcebookworm3.1.3-6not yet assignedNot reported[924509]
Ubuntursyncdebnoble3.1.3-6Not reportedNot reportedNot reported
Ubuntuklibcdebnoble2.0.13-4ubuntu0.2Not reportedNot reportedNot reported
Ubuntuklibc-utilsdebnoble2.0.13-4ubuntu0.2Not reportedNot reportedNot reported
Ubuntulibklibcdebnoble2.0.13-4ubuntu0.2Not reportedNot reportedNot reported
Ubuntulibklibc-devdebnoble2.0.13-4ubuntu0.2Not reportedNot reportedNot reported
Alpinemariadbapk3.1010.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.1110.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.1210.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.1310.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.1410.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.1510.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.1610.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.1710.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.1810.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.1910.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.2010.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.2110.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.2210.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.2310.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.2410.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.610.1.37-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.710.1.37-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.810.2.19-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinemariadbapk3.910.3.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpineperlapk3.55.24.3-r1Not reportedALPINE-CVE-2016-9843Not reported
Alpineperlapk3.65.24.3-r1Not reportedALPINE-CVE-2016-9843Not reported
Alpinezlibapk3.31.2.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinezlibapk3.41.2.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Alpinezlibapk3.51.2.11-r0Not reportedALPINE-CVE-2016-9843Not reported
Ubuntuklibcdebpro2.0.7-1ubuntu5.2+esm1Not reportedUSN-7959-1Not reported
Ubuntuklibcdeb22.042.0.10-4ubuntu0.2Not reportedUSN-7959-1Not reported
Ubuntuklibcdeb24.042.0.13-4ubuntu0.2Not reportedUSN-7959-1Not reported
Ubuntuklibcdeb25.102.0.14-1ubuntu1.1Not reportedUSN-7959-1Not reported
Susemariadbrpmhpe helion openstack 810.0.38-29.27.3Not reportedSUSE-SU-2019:2048-1Not reported
Susemariadbrpmopenstack cloud 710.0.38-29.27.3Not reportedSUSE-SU-2019:2048-1Not reported
Susemariadbrpmopenstack cloud 810.0.38-29.27.3Not reportedSUSE-SU-2019:2048-1Not reported
Susemariadbrpmopenstack cloud crowbar 810.0.38-29.27.3Not reportedSUSE-SU-2019:2048-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp210.0.38-29.27.3Not reportedSUSE-SU-2019:2048-1Not reported
Susemariadbrpmlinux enterprise server 12 sp1-ltss10.0.38-29.27.3Not reportedSUSE-SU-2019:2048-1Not reported
Susemariadbrpmlinux enterprise server 12 sp2-ltss10.0.38-29.27.3Not reportedSUSE-SU-2019:2048-1Not reported
Susemariadbrpmlinux enterprise server 12 sp2-bcl10.0.38-29.27.3Not reportedSUSE-SU-2019:2048-1Not reported
Susemariadbrpmenterprise storage 410.0.38-29.27.3Not reportedSUSE-SU-2019:2048-1Not reported
Opensusemariadbrpmleap 15.010.2.22-lp150.2.9.1Not reportedOPENSUSE-SU-2019:0327-1Not reported
Opensuseperl-Compress-Raw-Zlibrpmtumbleweed2.213-1.1Not reportedOPENSUSE-SU-2025:14656-1Not reported
Susemariadb-100rpmlinux enterprise desktop 12 sp410.0.37-2.3.1Not reportedSUSE-SU-2018:4211-1Not reported
Susemariadb-100rpmlinux enterprise software development kit 12 sp410.0.37-2.3.1Not reportedSUSE-SU-2018:4211-1Not reported
Susemariadb-100rpmlinux enterprise server 12 sp410.0.37-2.3.1Not reportedSUSE-SU-2018:4211-1Not reported
Susemariadb-100rpmlinux enterprise server for sap applications 12 sp410.0.37-2.3.1Not reportedSUSE-SU-2018:4211-1Not reported
Susemariadb-100rpmlinux enterprise workstation extension 12 sp410.0.37-2.3.1Not reportedSUSE-SU-2018:4211-1Not reported
Susemariadbrpmlinux enterprise server 12-ltss10.0.37-20.49.2Not reportedSUSE-SU-2018:3972-1Not reported
Susemysqlrpmlinux enterprise software development kit 11 sp45.5.62-0.39.18.1Not reportedSUSE-SU-2018:3542-1Not reported
Susemysqlrpmlinux enterprise point of sale 11 sp35.5.62-0.39.18.1Not reportedSUSE-SU-2018:3542-1Not reported
Susemysqlrpmlinux enterprise server 11 sp3-ltss5.5.62-0.39.18.1Not reportedSUSE-SU-2018:3542-1Not reported
Susemysqlrpmlinux enterprise server 11 sp3-teradata5.5.62-0.39.18.1Not reportedSUSE-SU-2018:3542-1Not reported
Susemysqlrpmlinux enterprise server 11 sp45.5.62-0.39.18.1Not reportedSUSE-SU-2018:3542-1Not reported
Susemysqlrpmlinux enterprise server for sap applications 11 sp45.5.62-0.39.18.1Not reportedSUSE-SU-2018:3542-1Not reported
Susemariadbrpmlinux enterprise module for server applications 1510.2.22-3.14.1Not reportedSUSE-SU-2019:0555-1Not reported
Susegalera-3rpmhpe helion openstack 825.3.24-4.3.1Not reportedSUSE-SU-2019:0628-1Not reported
Susemariadbrpmhpe helion openstack 810.2.21-4.8.1Not reportedSUSE-SU-2019:0628-1Not reported
Susemariadb-connector-crpmhpe helion openstack 83.0.6-3.6.1Not reportedSUSE-SU-2019:0628-1Not reported
Susegalera-3rpmopenstack cloud 825.3.24-4.3.1Not reportedSUSE-SU-2019:0628-1Not reported
Susemariadbrpmopenstack cloud 810.2.21-4.8.1Not reportedSUSE-SU-2019:0628-1Not reported
Susemariadb-connector-crpmopenstack cloud 83.0.6-3.6.1Not reportedSUSE-SU-2019:0628-1Not reported
Susegalera-3rpmopenstack cloud crowbar 825.3.24-4.3.1Not reportedSUSE-SU-2019:0628-1Not reported
Susemariadbrpmopenstack cloud crowbar 810.2.21-4.8.1Not reportedSUSE-SU-2019:0628-1Not reported
Susemariadb-connector-crpmopenstack cloud crowbar 83.0.6-3.6.1Not reportedSUSE-SU-2019:0628-1Not reported
Susemariadbrpmlinux enterprise desktop 12 sp410.2.21-3.7.1Not reportedSUSE-SU-2019:0119-1Not reported
Susemariadbrpmlinux enterprise server 12 sp410.2.21-3.7.1Not reportedSUSE-SU-2019:0119-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp410.2.21-3.7.1Not reportedSUSE-SU-2019:0119-1Not reported
Susemariadbrpmopenstack cloud 710.2.22-10.1Not reportedSUSE-SU-2019:1441-1Not reported
Susemariadb-connector-crpmopenstack cloud 73.0.7-1.6.1Not reportedSUSE-SU-2019:1441-1Not reported

[Debian bug #847275][Debian bug #924509]

OpenFactory catalog packages

Die Paketzuordnung läuft.

[Debian 12 (Bookworm)]

  • [lib32z1]Unbekannt

    Quellpaket: [zlib]

    Details (1)
    • 1:1.2.13.dfsg-1 · amd64 · bookworm

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · bookworm; usn · zlib · debian · 12

  • [lib32z1-dev]Unbekannt

    Quellpaket: [zlib]

    Details (1)
    • 1:1.2.13.dfsg-1 · amd64 · bookworm

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · bookworm; usn · zlib · debian · 12

  • [rsync]Unbekannt
    Details (4)
    • 3.2.7-1+deb12u6 · amd64 · bookworm

      Behoben · Behoben: 3.1.3-6

      usn · rsync · debian · bookworm; usn · rsync · debian · 12

    • 3.2.7-1+deb12u6 · arm64 · bookworm

      Behoben · Behoben: 3.1.3-6

      usn · rsync · debian · bookworm; usn · rsync · debian · 12

    • 3.2.7-1+deb12u5 · amd64 · bookworm-security

      Behoben · Behoben: 3.1.3-6

      usn · rsync · debian · bookworm; usn · rsync · debian · 12

    • 3.2.7-1+deb12u5 · arm64 · bookworm-security

      Behoben · Behoben: 3.1.3-6

      usn · rsync · debian · bookworm; usn · rsync · debian · 12

  • [zlib1g]Unbekannt

    Quellpaket: [zlib]

    Details (2)
    • 1:1.2.13.dfsg-1 · amd64 · bookworm

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · bookworm; usn · zlib · debian · 12

    • 1:1.2.13.dfsg-1 · arm64 · bookworm

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · bookworm; usn · zlib · debian · 12

  • [zlib1g-dev]Unbekannt

    Quellpaket: [zlib]

    Details (2)
    • 1:1.2.13.dfsg-1 · amd64 · bookworm

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · bookworm; usn · zlib · debian · 12

    • 1:1.2.13.dfsg-1 · arm64 · bookworm

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · bookworm; usn · zlib · debian · 12

[Debian 13 (Trixie)]

  • [lib32z1]Unbekannt

    Quellpaket: [zlib]

    Details (1)
    • 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

  • [lib32z1-dev]Unbekannt

    Quellpaket: [zlib]

    Details (1)
    • 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

  • [libminizip1t64]Unbekannt

    Quellpaket: [zlib]

    Details (2)
    • 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

    • 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

  • [libminizip-dev]Unbekannt

    Quellpaket: [zlib]

    Details (2)
    • 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

    • 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

  • [minizip]Unbekannt

    Quellpaket: [zlib]

    Details (2)
    • 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

    • 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

  • [rsync]Unbekannt
    Details (5)
    • 3.4.1+ds1-5+deb13u4 · amd64 · trixie

      Behoben · Behoben: 3.1.3-6

      usn · rsync · debian · 13

    • 3.4.1+ds1-5+deb13u4 · arm64 · trixie

      Behoben · Behoben: 3.1.3-6

      usn · rsync · debian · 13

    • 3.4.1+ds1-5+deb13u3 · amd64 · trixie-security · Historical version

      Behoben · Behoben: 3.1.3-6

      usn · rsync · debian · 13

    • 3.4.1+ds1-5+deb13u3 · arm64 · trixie-security

      Behoben · Behoben: 3.1.3-6

      usn · rsync · debian · 13

    • 3.5.0+ds1-0+deb13u1 · amd64 · trixie-security

      Behoben · Behoben: 3.1.3-6

      usn · rsync · debian · 13

  • [zlib1g]Unbekannt

    Quellpaket: [zlib]

    Details (2)
    • 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

    • 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

  • [zlib1g-dev]Unbekannt

    Quellpaket: [zlib]

    Details (2)
    • 1:1.3.dfsg+really1.3.1-1+b1 · amd64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

    • 1:1.3.dfsg+really1.3.1-1+b1 · arm64 · trixie

      Behoben · Behoben: 1:1.2.8.dfsg-3

      usn · zlib · debian · 13

[openSUSE Tumbleweed]

Beobachtet:

Referenzen