CVE-2026-27171

ADVISORY - nist

Summary

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

EPSS Score⁠: 0.00218 (0.126)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-1284⁠

Improper Validation of Specified Quantity in Input

ADVISORY - redhat

CWE-835⁠

Loop with Unreachable Exit Condition ('Infinite Loop')

Impacted images

Advisories

Alpine

CREATED

6 months ago

UPDATED

21 days ago

ADVISORY IDCVE-2026-27171⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
alpine/zlib	apk	alpine	3.23	<1.3.2-r0	1.3.2-r0
alpine/zlib	apk	alpine	3.24	<1.3.2-r0	1.3.2-r0
alpine/zlib	apk	alpine	edge	<1.3.2-r0	1.3.2-r0
alpine/zlib	apk	alpine	3.19	<=1.2.11-r4	Not yet available
alpine/zlib	apk	alpine	3.19	<=1.2.12-r2	Not yet available
alpine/zlib	apk	alpine	3.19	<=1.3-r2	Not yet available
alpine/zlib	apk	alpine	3.19	<=1.3.1-r0	Not yet available
alpine/zlib	apk	alpine	3.20	<1.3.2-r0	1.3.2-r0
alpine/zlib	apk	alpine	3.22	<1.3.2-r0	1.3.2-r0
alpine/zlib	apk	alpine	3.21	<1.3.2-r0	1.3.2-r0

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

6 months ago

UPDATED

2 months ago

ADVISORY IDCVE-2026-27171⁠

EXPLOITABILITY SCORE

1.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1284⁠

CVSS SCORE

2.9low

Debian

CREATED

6 months ago

UPDATED

4 months ago

ADVISORY IDCVE-2026-27171⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

6 months ago

UPDATED

2 months ago

ADVISORY IDCVE-2026-27171⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5low

Amazon

CREATED

4 months ago

UPDATED

4 months ago

ADVISORY IDALAS2023-2026-1608⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Amazon

CREATED

4 months ago

UPDATED

4 months ago

ADVISORY IDALAS2023-2026-1609⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

4 months ago

UPDATED

4 months ago

ADVISORY IDALAS2023-2026-1616⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Red Hat

CREATED

6 months ago

UPDATED

6 months ago

ADVISORY IDCVE-2026-27171⁠

EXPLOITABILITY SCORE

1.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-835⁠

CVSS SCORE

2.9low

Chainguard

CREATED

6 months ago

UPDATED

6 months ago

ADVISORY ID

CGA-624v-j5jq-2hph

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Photon

CREATED

2 months ago

UPDATED

2 months ago

ADVISORY ID

CVE-2026-27171

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5medium

minimos

CREATED

6 months ago

UPDATED

6 months ago

ADVISORY ID

MINI-hwjj-mj9h-qh5g

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY