CVE-2026-27171

Опубликовано: 18 фев. 2026

Источник: nvd

CVSS3: 2.9

CVSS3: 5.5

EPSS Низкий

Описание

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

Ссылки

https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/
Product
https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf
Technical Description
https://github.com/madler/zlib/issues/904
Issue Tracking
Exploit
https://github.com/madler/zlib/releases/tag/v1.3.2
Release Notes
https://ostif.org/zlib-audit-complete/
Product
https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf
Technical Description

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*

Версия до 1.3.2 (исключая)

EPSS

Процентиль: 1%

0.00007

Низкий

2.9 Low

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-1284

Связанные уязвимости

CVE-2026-27171

CVSS3: 2.9

ubuntu

около 1 месяца назад

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

CVE-2026-27171

CVSS3: 2.9

redhat

около 1 месяца назад

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

CVE-2026-27171

CVSS3: 2.9

msrc

около 1 месяца назад

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

CVE-2026-27171

CVSS3: 2.9

debian

около 1 месяца назад

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32 ...

SUSE-SU-2026:0783-1

suse-cvrf

23 дня назад

Security update for zlib

EPSS

Процентиль: 1%

0.00007

Низкий

2.9 Low

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-1284