CVE-2026-27171

Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 24 (4.2.0.24)

Details

CVSS v3: 2.9
NVD published: 2026-02-18 04:16:01
EPSS: <0.1% probability · 0.6th percentile — 2026-04-08
Affected versions: cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*
Summary: zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.
Remediation: Not available in our cache.
Exploit info: https://github.com/madler/zlib/issues/904

View on NVD

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.