CVE-2026-27171
Vulnerability
CVE-2026-27171
zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions
ecosystem: redhat:6, redhat:7, redhat:8, redhat:9, redhat:10A flaw was found in zlib. An attacker providing specially crafted input to the `crc32_combine64` or `crc32_combine_gen64` functions could trigger an infinite loop within the `x2nmodp` function. This leads to excessive CPU consumption, which can result in a Denial of Service (DoS) for the affected system.
References
- secalert@redhat.com: https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/
- secalert@redhat.com: https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf
- secalert@redhat.com: https://access.redhat.com/security/cve/CVE-2026-27171
- secalert@redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2440530
- secalert@redhat.com: https://github.com/madler/zlib/issues/904
- secalert@redhat.com: https://github.com/madler/zlib/releases/tag/v1.3.2
- secalert@redhat.com: https://nvd.nist.gov/vuln/detail/CVE-2026-27171
- secalert@redhat.com: https://ostif.org/zlib-audit-complete/
- secalert@redhat.com: https://www.cve.org/CVERecord?id=CVE-2026-27171
type: vendor
source: secalert@redhat.com
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
| AV | Local | |
|---|---|---|
| AC | High | |
| PR | None | |
| UI | None | |
| S | Not Changed | |
| C | None | |
| I | None | |
| A | Low |
source: secalert@redhat.com
Loop with Unreachable Exit Condition ('Infinite Loop')
source: secalert@redhat.com
published: 2026-02-18 02:36:19
modified: 2026-02-18 16:59:26
Detection
redhat-vex
OR
 
java-21-openjdk
package type: binary
 
java-21-openjdk-demo
package type: binary
 
java-21-openjdk-demo-fastdebug
package type: binary
 
java-21-openjdk-demo-slowdebug
package type: binary
 
java-21-openjdk-devel
package type: binary
 
java-21-openjdk-devel-fastdebug
package type: binary
 
java-21-openjdk-devel-slowdebug
package type: binary
 
java-21-openjdk-fastdebug
package type: binary
 
java-21-openjdk-headless
package type: binary
 
java-21-openjdk-headless-fastdebug
package type: binary
 
java-21-openjdk-headless-slowdebug
package type: binary
 
java-21-openjdk-javadoc
package type: binary
 
java-21-openjdk-javadoc-zip
package type: binary
 
java-21-openjdk-jmods
package type: binary
 
java-21-openjdk-jmods-fastdebug
package type: binary
 
java-21-openjdk-jmods-slowdebug
package type: binary
 
java-21-openjdk-slowdebug
package type: binary
 
java-21-openjdk-src
package type: binary
 
java-21-openjdk-src-fastdebug
package type: binary
 
java-21-openjdk-src-slowdebug
package type: binary
 
java-21-openjdk-static-libs
package type: binary
 
java-21-openjdk-static-libs-fastdebug
package type: binary
 
java-21-openjdk-static-libs-slowdebug
package type: binary
 
java-25-openjdk
package type: binary
 
java-25-openjdk-crypto-adapter
package type: binary
 
java-25-openjdk-crypto-adapter-fastdebug
package type: binary
 
java-25-openjdk-crypto-adapter-slowdebug
package type: binary
 
java-25-openjdk-demo
package type: binary
 
java-25-openjdk-demo-fastdebug
package type: binary
 
java-25-openjdk-demo-slowdebug
package type: binary
 
java-25-openjdk-devel
package type: binary
 
java-25-openjdk-devel-fastdebug
package type: binary
 
java-25-openjdk-devel-slowdebug
package type: binary
 
java-25-openjdk-fastdebug
package type: binary
 
java-25-openjdk-headless
package type: binary
 
java-25-openjdk-headless-fastdebug
package type: binary
 
java-25-openjdk-headless-slowdebug
package type: binary
 
java-25-openjdk-javadoc
package type: binary
 
java-25-openjdk-javadoc-zip
package type: binary
 
java-25-openjdk-jmods
package type: binary
 
java-25-openjdk-jmods-fastdebug
package type: binary
 
java-25-openjdk-jmods-slowdebug
package type: binary
 
java-25-openjdk-slowdebug
package type: binary
 
java-25-openjdk-src
package type: binary
 
java-25-openjdk-src-fastdebug
package type: binary
 
java-25-openjdk-src-slowdebug
package type: binary
 
java-25-openjdk-static-libs
package type: binary
 
java-25-openjdk-static-libs-fastdebug
package type: binary
 
java-25-openjdk-static-libs-slowdebug
package type: binary
 
mingw32-zlib
package type: binary
 
mingw32-zlib-static
package type: binary
 
mingw64-zlib
package type: binary
 
mingw64-zlib-static
package type: binary
 
rsync
package type: binary
 
rsync-daemon
package type: binary
 
rsync-rrsync
package type: binary
 
java-21-openjdk
package type: source
 
java-25-openjdk
package type: source
 
rsync
package type: source
tag: rhel-10:3cbd8caf-692a-d389-9ac5-37f4e6f49e3e
redhat-vex
OR
 
minizip
package type: binary
 
minizip-devel
package type: binary
 
zlib
package type: binary
 
zlib-devel
package type: binary
 
zlib-static
package type: binary
 
zlib
package type: source
tag: rhel-6-els:69bf0e82-521e-f1c1-dc56-e490e689580b
OR
 
minizip
package type: binary
 
minizip-devel
package type: binary
 
zlib
package type: binary
 
zlib-devel
package type: binary
 
zlib-static
package type: binary
 
zlib
package type: source
tag: rhel-6-extras-including-unpatched:69bf0e82-521e-f1c1-dc56-e490e689580b
OR
 
minizip
package type: binary
 
minizip-devel
package type: binary
 
zlib
package type: binary
 
zlib-devel
package type: binary
 
zlib-static
package type: binary
 
zlib
package type: source
tag: rhel-6-including-unpatched:69bf0e82-521e-f1c1-dc56-e490e689580b
OR
 
minizip
package type: binary
 
minizip-devel
package type: binary
 
zlib
package type: binary
 
zlib-devel
package type: binary
 
zlib-static
package type: binary
 
zlib
package type: source
tag: rhel-6-supplementary:69bf0e82-521e-f1c1-dc56-e490e689580b
redhat-vex
OR
 
minizip
package type: binary
 
minizip-devel
package type: binary
 
zlib
package type: binary
 
zlib-devel
package type: binary
 
zlib-static
package type: binary
 
zlib
package type: source
tag: rhel-7-extras-including-unpatched:b99383bb-851e-f84d-e89f-fcee75efcdb8
OR
 
minizip
package type: binary
 
minizip-devel
package type: binary
 
zlib
package type: binary
 
zlib-devel
package type: binary
 
zlib-static
package type: binary
 
zlib
package type: source
tag: rhel-7-including-unpatched:b99383bb-851e-f84d-e89f-fcee75efcdb8
OR
 
minizip
package type: binary
 
minizip-devel
package type: binary
 
zlib
package type: binary
 
zlib-devel
package type: binary
 
zlib-static
package type: binary
 
zlib
package type: source
tag: rhel-7-supplementary:b99383bb-851e-f84d-e89f-fcee75efcdb8
redhat-vex
OR
 
java-1.8.0-openjdk
package type: binary
 
java-1.8.0-openjdk-accessibility
package type: binary
 
java-1.8.0-openjdk-accessibility-fastdebug
package type: binary
 
java-1.8.0-openjdk-accessibility-slowdebug
package type: binary
 
java-1.8.0-openjdk-demo
package type: binary
 
java-1.8.0-openjdk-demo-fastdebug
package type: binary
 
java-1.8.0-openjdk-demo-slowdebug
package type: binary
 
java-1.8.0-openjdk-devel
package type: binary
 
java-1.8.0-openjdk-devel-fastdebug
package type: binary
 
java-1.8.0-openjdk-devel-slowdebug
package type: binary
 
java-1.8.0-openjdk-fastdebug
package type: binary
 
java-1.8.0-openjdk-headless
package type: binary
 
java-1.8.0-openjdk-headless-fastdebug
package type: binary
 
java-1.8.0-openjdk-headless-slowdebug
package type: binary
 
java-1.8.0-openjdk-javadoc
package type: binary
 
java-1.8.0-openjdk-javadoc-zip
package type: binary
 
java-1.8.0-openjdk-slowdebug
package type: binary
 
java-1.8.0-openjdk-src
package type: binary
 
java-1.8.0-openjdk-src-fastdebug
package type: binary
 
java-1.8.0-openjdk-src-slowdebug
package type: binary
 
java-17-openjdk
package type: binary
 
java-17-openjdk-demo
package type: binary
 
java-17-openjdk-demo-fastdebug
package type: binary
 
java-17-openjdk-demo-slowdebug
package type: binary
 
java-17-openjdk-devel
package type: binary
 
java-17-openjdk-devel-fastdebug
package type: binary
 
java-17-openjdk-devel-slowdebug
package type: binary
 
java-17-openjdk-fastdebug
package type: binary
 
java-17-openjdk-headless
package type: binary
 
java-17-openjdk-headless-fastdebug
package type: binary
 
java-17-openjdk-headless-slowdebug
package type: binary
 
java-17-openjdk-javadoc
package type: binary
 
java-17-openjdk-javadoc-zip
package type: binary
 
java-17-openjdk-jmods
package type: binary
 
java-17-openjdk-jmods-fastdebug
package type: binary
 
java-17-openjdk-jmods-slowdebug
package type: binary
 
java-17-openjdk-slowdebug
package type: binary
 
java-17-openjdk-src
package type: binary
 
java-17-openjdk-src-fastdebug
package type: binary
 
java-17-openjdk-src-slowdebug
package type: binary
 
java-17-openjdk-static-libs
package type: binary
 
java-17-openjdk-static-libs-fastdebug
package type: binary
 
java-17-openjdk-static-libs-slowdebug
package type: binary
 
java-21-openjdk
package type: binary
 
java-21-openjdk-demo
package type: binary
 
java-21-openjdk-demo-fastdebug
package type: binary
 
java-21-openjdk-demo-slowdebug
package type: binary
 
java-21-openjdk-devel
package type: binary
 
java-21-openjdk-devel-fastdebug
package type: binary
 
java-21-openjdk-devel-slowdebug
package type: binary
 
java-21-openjdk-fastdebug
package type: binary
 
java-21-openjdk-headless
package type: binary
 
java-21-openjdk-headless-fastdebug
package type: binary
 
java-21-openjdk-headless-slowdebug
package type: binary
 
java-21-openjdk-javadoc
package type: binary
 
java-21-openjdk-javadoc-zip
package type: binary
 
java-21-openjdk-jmods
package type: binary
 
java-21-openjdk-jmods-fastdebug
package type: binary
 
java-21-openjdk-jmods-slowdebug
package type: binary
 
java-21-openjdk-slowdebug
package type: binary
 
java-21-openjdk-src
package type: binary
 
java-21-openjdk-src-fastdebug
package type: binary
 
java-21-openjdk-src-slowdebug
package type: binary
 
java-21-openjdk-static-libs
package type: binary
 
java-21-openjdk-static-libs-fastdebug
package type: binary
 
java-21-openjdk-static-libs-slowdebug
package type: binary
 
mingw32-zlib
package type: binary
 
mingw32-zlib-static
package type: binary
 
mingw64-zlib
package type: binary
 
mingw64-zlib-static
package type: binary
 
mysql:8.4::mecab
package type: binary
 
mysql:8.4::mecab-devel
package type: binary
 
mysql:8.4::mecab-ipadic
package type: binary
 
mysql:8.4::mecab-ipadic-EUCJP
package type: binary
 
mysql:8.4::mysql
package type: binary
 
mysql:8.4::mysql-common
package type: binary
 
mysql:8.4::mysql-devel
package type: binary
 
mysql:8.4::mysql-errmsg
package type: binary
 
mysql:8.4::mysql-libs
package type: binary
 
mysql:8.4::mysql-server
package type: binary
 
mysql:8.4::mysql-test
package type: binary
 
mysql:8.4::mysql-test-data
package type: binary
 
nodejs:24::nodejs
package type: binary
 
nodejs:24::nodejs-devel
package type: binary
 
nodejs:24::nodejs-docs
package type: binary
 
nodejs:24::nodejs-full-i18n
package type: binary
 
nodejs:24::nodejs-libs
package type: binary
 
nodejs:24::nodejs-nodemon
package type: binary
 
nodejs:24::nodejs-packaging
package type: binary
 
nodejs:24::nodejs-packaging-bundler
package type: binary
 
nodejs:24::npm
package type: binary
 
nodejs:24::v8-12.4-devel
package type: binary
 
nodejs:24::v8-13.6-devel
package type: binary
 
rsync
package type: binary
 
rsync-daemon
package type: binary
 
zlib
package type: binary
 
zlib-devel
package type: binary
 
zlib-static
package type: binary
 
java-1.8.0-openjdk
package type: source
 
java-17-openjdk
package type: source
 
java-21-openjdk
package type: source
 
mingw-zlib
package type: source
 
mysql:8.4::mecab
package type: source
 
mysql:8.4::mecab-ipadic
package type: source
 
mysql:8.4::mysql
package type: source
 
nodejs:24::nodejs
package type: source
 
nodejs:24::nodejs-nodemon
package type: source
 
nodejs:24::nodejs-packaging
package type: source
 
rsync
package type: source
 
zlib
package type: source
tag: rhel-8-including-unpatched:12fa33e7-581f-31d7-5335-f28d9c45e7ad
redhat-vex
OR
 
java-1.8.0-openjdk
package type: binary
 
java-1.8.0-openjdk-demo
package type: binary
 
java-1.8.0-openjdk-demo-fastdebug
package type: binary
 
java-1.8.0-openjdk-demo-slowdebug
package type: binary
 
java-1.8.0-openjdk-devel
package type: binary
 
java-1.8.0-openjdk-devel-fastdebug
package type: binary
 
java-1.8.0-openjdk-devel-slowdebug
package type: binary
 
java-1.8.0-openjdk-fastdebug
package type: binary
 
java-1.8.0-openjdk-headless
package type: binary
 
java-1.8.0-openjdk-headless-fastdebug
package type: binary
 
java-1.8.0-openjdk-headless-slowdebug
package type: binary
 
java-1.8.0-openjdk-javadoc
package type: binary
 
java-1.8.0-openjdk-javadoc-zip
package type: binary
 
java-1.8.0-openjdk-slowdebug
package type: binary
 
java-1.8.0-openjdk-src
package type: binary
 
java-1.8.0-openjdk-src-fastdebug
package type: binary
 
java-1.8.0-openjdk-src-slowdebug
package type: binary
 
java-17-openjdk
package type: binary
 
java-17-openjdk-demo
package type: binary
 
java-17-openjdk-demo-fastdebug
package type: binary
 
java-17-openjdk-demo-slowdebug
package type: binary
 
java-17-openjdk-devel
package type: binary
 
java-17-openjdk-devel-fastdebug
package type: binary
 
java-17-openjdk-devel-slowdebug
package type: binary
 
java-17-openjdk-fastdebug
package type: binary
 
java-17-openjdk-headless
package type: binary
 
java-17-openjdk-headless-fastdebug
package type: binary
 
java-17-openjdk-headless-slowdebug
package type: binary
 
java-17-openjdk-javadoc
package type: binary
 
java-17-openjdk-javadoc-zip
package type: binary
 
java-17-openjdk-jmods
package type: binary
 
java-17-openjdk-jmods-fastdebug
package type: binary
 
java-17-openjdk-jmods-slowdebug
package type: binary
 
java-17-openjdk-slowdebug
package type: binary
 
java-17-openjdk-src
package type: binary
 
java-17-openjdk-src-fastdebug
package type: binary
 
java-17-openjdk-src-slowdebug
package type: binary
 
java-17-openjdk-static-libs
package type: binary
 
java-17-openjdk-static-libs-fastdebug
package type: binary
 
java-17-openjdk-static-libs-slowdebug
package type: binary
 
java-21-openjdk
package type: binary
 
java-21-openjdk-demo
package type: binary
 
java-21-openjdk-demo-fastdebug
package type: binary
 
java-21-openjdk-demo-slowdebug
package type: binary
 
java-21-openjdk-devel
package type: binary
 
java-21-openjdk-devel-fastdebug
package type: binary
 
java-21-openjdk-devel-slowdebug
package type: binary
 
java-21-openjdk-fastdebug
package type: binary
 
java-21-openjdk-headless
package type: binary
 
java-21-openjdk-headless-fastdebug
package type: binary
 
java-21-openjdk-headless-slowdebug
package type: binary
 
java-21-openjdk-javadoc
package type: binary
 
java-21-openjdk-javadoc-zip
package type: binary
 
java-21-openjdk-jmods
package type: binary
 
java-21-openjdk-jmods-fastdebug
package type: binary
 
java-21-openjdk-jmods-slowdebug
package type: binary
 
java-21-openjdk-slowdebug
package type: binary
 
java-21-openjdk-src
package type: binary
 
java-21-openjdk-src-fastdebug
package type: binary
 
java-21-openjdk-src-slowdebug
package type: binary
 
java-21-openjdk-static-libs
package type: binary
 
java-21-openjdk-static-libs-fastdebug
package type: binary
 
java-21-openjdk-static-libs-slowdebug
package type: binary
 
java-25-openjdk
package type: binary
 
java-25-openjdk-crypto-adapter
package type: binary
 
java-25-openjdk-crypto-adapter-fastdebug
package type: binary
 
java-25-openjdk-crypto-adapter-slowdebug
package type: binary
 
java-25-openjdk-demo
package type: binary
 
java-25-openjdk-demo-fastdebug
package type: binary
 
java-25-openjdk-demo-slowdebug
package type: binary
 
java-25-openjdk-devel
package type: binary
 
java-25-openjdk-devel-fastdebug
package type: binary
 
java-25-openjdk-devel-slowdebug
package type: binary
 
java-25-openjdk-fastdebug
package type: binary
 
java-25-openjdk-headless
package type: binary
 
java-25-openjdk-headless-fastdebug
package type: binary
 
java-25-openjdk-headless-slowdebug
package type: binary
 
java-25-openjdk-javadoc
package type: binary
 
java-25-openjdk-javadoc-zip
package type: binary
 
java-25-openjdk-jmods
package type: binary
 
java-25-openjdk-jmods-fastdebug
package type: binary
 
java-25-openjdk-jmods-slowdebug
package type: binary
 
java-25-openjdk-slowdebug
package type: binary
 
java-25-openjdk-src
package type: binary
 
java-25-openjdk-src-fastdebug
package type: binary
 
java-25-openjdk-src-slowdebug
package type: binary
 
java-25-openjdk-static-libs
package type: binary
 
java-25-openjdk-static-libs-fastdebug
package type: binary
 
java-25-openjdk-static-libs-slowdebug
package type: binary
 
mingw32-zlib
package type: binary
 
mingw32-zlib-static
package type: binary
 
mingw64-zlib
package type: binary
 
mingw64-zlib-static
package type: binary
 
mysql:8.4::mysql
package type: binary
 
mysql:8.4::mysql-common
package type: binary
 
mysql:8.4::mysql-devel
package type: binary
 
mysql:8.4::mysql-errmsg
package type: binary
 
mysql:8.4::mysql-libs
package type: binary
 
mysql:8.4::mysql-server
package type: binary
 
mysql:8.4::mysql-test
package type: binary
 
nodejs:24::nodejs
package type: binary
 
nodejs:24::nodejs-docs
package type: binary
 
nodejs:24::nodejs-full-i18n
package type: binary
 
nodejs:24::nodejs-libs
package type: binary
 
nodejs:24::npm
package type: binary
 
rsync
package type: binary
 
rsync-daemon
package type: binary
 
rsync-rrsync
package type: binary
 
zlib
package type: binary
 
zlib-devel
package type: binary
 
zlib-static
package type: binary
 
java-1.8.0-openjdk
package type: source
 
java-17-openjdk
package type: source
 
java-21-openjdk
package type: source
 
java-25-openjdk
package type: source
 
mingw-zlib
package type: source
 
mysql:8.4::mysql
package type: source
 
nodejs:24::nodejs
package type: source
 
rsync
package type: source
 
zlib
package type: source
tag: rhel-9-including-unpatched:9a59b70f-eb1f-388f-04b8-3204b872b372
Data Sources
- RedHat Enterprise Linux CSAF VEX
redhat-vex