SB20250227223 - Denial of service in F5 APM Clients zlib library



SB20250227223 - Denial of service in F5 APM Clients zlib library

Published: February 27, 2025

Security Bulletin ID SB20250227223
Severity
Low
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Denial of service (CVE-ID: CVE-2016-9841)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in zlib due to out-of-bounds pointer arithmetic in inftrees.c. A remote attacker can cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.