CVE-2026-27171

Опубликовано: 18 фев. 2026

Источник: nvd

CVSS3: 2.9

CVSS3: 5.5

EPSS Низкий

Описание

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

Ссылки

https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/
Product
https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf
Technical Description
https://github.com/madler/zlib/issues/904
Exploit
Issue Tracking
https://github.com/madler/zlib/releases/tag/v1.3.2
Release Notes
https://ostif.org/zlib-audit-complete/
Product
https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf
Technical Description

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*

Версия от 1.2.12 (включая) до 1.3.2 (исключая)

EPSS

Процентиль: 10%

0.00204

Низкий

2.9 Low

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-1284

Связанные уязвимости

CVE-2026-27171

CVSS3: 2.9

ubuntu

4 месяца назад

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

CVE-2026-27171

CVSS3: 3.3

redhat

4 месяца назад

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

CVE-2026-27171

CVSS3: 2.9

msrc

4 месяца назад

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

CVE-2026-27171

CVSS3: 2.9

debian

4 месяца назад

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32 ...

SUSE-SU-2026:0783-1

suse-cvrf

4 месяца назад

Security update for zlib

EPSS

Процентиль: 10%

0.00204

Низкий

2.9 Low

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-1284