What’s Vulnerable › Vulnerabilities

CVE-2017-9434

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-05 · updated 2026-06-17
• Weakness: CWE-125

Description

Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter.

Affected products

• Cryptopp Crypto++: through 5.6.4

References

• http://openwall.com/lists/oss-security/2017/06/06/2
• http://www.securityfocus.com/bid/99007
• https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965
• https://github.com/weidai11/cryptopp/issues/414
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7IL5A6465IEPW5GAWGXB2ENJPFYVWTJM/
• http://openwall.com/lists/oss-security/2017/06/06/2
• http://www.securityfocus.com/bid/99007
• https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965
• https://github.com/weidai11/cryptopp/issues/414
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7IL5A6465IEPW5GAWGXB2ENJPFYVWTJM/

Get alerted when CVE-2017-9434 or the next vulnerability affects your stack