CVE-2015-8777

🗓️ 20 Jan 2016 02:00:00Reported by redhatType

The process_envvars function in glibc before 2.23 allows local users to bypass pointer-guarding protection mechanism via LD_POINTER_GUARD

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: Vulnerabilities in glibc affect PowerKVM	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by a vulnerability in glibc	16 Jun 201822:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU C library (glibc) affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2015-7547 CVE-2015-8776 CVE-2015-8777)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple glibc vulnerabilities	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities in OpenSSL, glibc, gcc, Net-SNMP, and OpenSSH affect IBM Security Proventia Network Enterprise Scanner	16 Jun 201821:41	–	ibm
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerabilities affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems (CVE-2015-8776 CVE-2015-8777 CVE-2015-8778 CVE-2015-8779)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU C Library (glibc) affects IBM Flex System Chassis Management Module (CVE-2014-9761 CVE-2015-8777)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in glibc affect Power Hardware Management Console (CVE-2015-7547, CVE-2014-9761, CVE-2015-8776, CVE-2015-8777, CVE-2015-8778, CVE-2015-8779)	23 Sep 202101:31	–	ibm
Amazon	Medium: glibc	31 Aug 201700:00	–	amazon
Tenable Nessus	Amazon Linux AMI : glibc (ALAS-2017-877)	1 Sep 201700:00	–	nessus

NVD

Node

gnu glibcRange≤2.22

Source	Link
hmarco	www.hmarco.org/bugs/glibc_ptr_mangle_weakness.html
ubuntu	www.ubuntu.com/usn/USN-2985-1
lists	www.lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html
openwall	www.openwall.com/lists/oss-security/2016/01/20/1
lists	www.lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html
debian	www.debian.org/security/2016/dsa-3480
lists	www.lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html
access	www.access.redhat.com/errata/RHSA-2017:1916
ubuntu	www.ubuntu.com/usn/USN-2985-2

06 May 2026 22:30Current

6.6Medium risk

Vulners AI Score6.6

CVSS 22.1

CVSS 35.5

EPSS0.00068

CWE-254