CVE-2016-9843 Other in n/a

Critical 9.8 Published Updated

A potential issue in the zlib library's big-endian CRC calculation might allow context-dependent attackers to cause unspecified impacts.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2016-9843?

CVE-2016-9843 is a critical vulnerability in Apple Iphone Os, published on 23 May 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

Which versions are affected by CVE-2016-9843?

It affects 24 products.

Products include Apple Iphone Os, Apple Mac Os X, Apple Tvos, Apple Watchos, Canonical Ubuntu Linux, Debian Debian Linux and 18 more.

How do I fix CVE-2016-9843?

Upgrade to a fixed version.

Is CVE-2016-9843 being exploited?

There is no known exploitation of CVE-2016-9843 in the wild and no public exploit code.

All Apple Iphone Os vulnerabilities

Sources

Also known as ALPINE-CVE-2016-9843, AZL-44352, AZL-45366, CLSA-2026-1772177379, CLSA-2026-1772213586, CLSA-2026-1772213835 and 9 more.

Is CVE-2016-9843 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free