DeutschShown in its original language — a full translation is planned for a future version.
GNU libc: Mehrere Schwachstellen
view advisory published 2016-01-19
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um beliebigen Code auszuführen, um Sicherheitsfunktionen zu umgehen, um Informationen offenzulegen oder um einen Denial of Service Zustand hervorzurufen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-8779US | critical9.8 | — | ||
Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (applicati… | ||||
| CVE-2015-8778US | critical9.8 | — | ||
Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbit… | ||||
| CVE-2015-8776US | critical9.1 | — | ||
The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain s… | ||||
| CVE-2014-9761US | critical9.8 | — | ||
Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or po… | ||||
| CVE-2015-8777US | medium5.5 | — | ||
The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero val… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2017-3601 vom 2017-08-09external
- SUSE Security Update SUSE-SU-2016:0470-1 vom 2016-02-16external
- SUSE Security Update SUSE-SU-2016:0471-1 vom 2016-02-16external
- SUSE Security Update SUSE-SU-2016:0472-1 vom 2016-02-16external
- SUSE Security Update SUSE-SU-2016:0473-1 vom 2016-02-16external
- OSS Security Mailinglist vom 2016-01-19external
- Ubuntu Security Notice USN-2985-1 vom 2016-05-26external
- Ubuntu Security Notice USN-2985-2 vom 2016-05-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan