Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-411-1:340DE
HistoryFeb 05, 2016 - 4:21 p.m.

[SECURITY] [DLA 411-1] eglibc security update

2016-02-0516:21:21
lists.debian.org
8

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.043 Low

EPSS

Percentile

92.2%

JSON

Package : eglibc
Version : eglibc_2.11.3-4+deb6u9
CVE ID : CVE-2014-9761 CVE-2015-8776 CVE-2015-8778 CVE-2015-8779

Several vulnerabilities have been fixed in the Debian GNU C Library,
eglibc:

CVE-2014-9761

The math's nan* function wrongly handled payload strings, yielding
to an unbounded stack allocation based on the length of the
arguments. To solve this issue, payload parsing has been refactored
out of strtod into a separate functions that nan* can call directly.

CVE-2015-8776

The strftime() function made it possible to access invalid memory,
allowing to segfault the calling application.

CVE-2015-8778

hcreate() was susceptible to an integer overflow, that may results
in out-of-bounds heap accesses.

CVE-2015-8779

The catopen() function suffered from multiple unbounded stack
allocations.

For Debian 6 "Squeeze", these issues have been fixed in eglibc version
eglibc_2.11.3-4+deb6u9. We recommend you to upgrade your eglibc
packages.

Learn more about the Debian Long Term Support (LTS) Project and how to
apply these updates at: https://wiki.debian.org/LTS/
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian8kfreebsd-i386locales-all< 2.19-18+deb8u3locales-all_2.19-18+deb8u3_kfreebsd-i386.deb
Debian7amd64libnss-files-udeb< 2.13-38+deb7u10libnss-files-udeb_2.13-38+deb7u10_amd64.deb
Debian8arm64libc6-dev< 2.19-18+deb8u3libc6-dev_2.19-18+deb8u3_arm64.deb
Debian7amd64libc6-prof< 2.13-38+deb7u10libc6-prof_2.13-38+deb7u10_amd64.deb
Debian7sparclibc-dev-bin< 2.13-38+deb7u10libc-dev-bin_2.13-38+deb7u10_sparc.deb
Debian7ia64libc6.1-dev< 2.13-38+deb7u10libc6.1-dev_2.13-38+deb7u10_ia64.deb
Debian8ppc64ellibc6-pic< 2.19-18+deb8u3libc6-pic_2.19-18+deb8u3_ppc64el.deb
Debian7i386libc6-xen< 2.13-38+deb7u10libc6-xen_2.13-38+deb7u10_i386.deb
Debian7mipslocales-all< 2.13-38+deb7u10locales-all_2.13-38+deb7u10_mips.deb
Debian8mipsellibc6-dev-mips64< 2.19-18+deb8u3libc6-dev-mips64_2.19-18+deb8u3_mipsel.deb
Rows per page:
1-10 of 4071

Related

ibm 27
centos 2
nessus 32
osv 5
oraclelinux 4
openvas 28
redhat 2
suse 9
amazon 1
mageia 1
fedora 1
debian 6
archlinux 4
gentoo 2
ubuntu 2
cloudfoundry 1
veracode 4
cve 4
f5 8
ubuntucve 4
prion 4
debiancve 4
packetstorm 2
rosalinux 1
ibm
ibm
Security Bulletin: OpenSource GNU Glibc as used in IBM QRadar SIEM is vulnerable to multiple vulnerabilities. (CVE-2014-9761, CVE-2015-8776, CVE-2015-8778, CVE-2015-8779)
2018-06-16 22:04:36
Security Bulletin: Multiple vulnerabilities in glibc affect Power Hardware Management Console
2021-09-23 01:31:39
Security Bulletin: Vulnerabilities in GNU C library (glibc) affect IBM Security Network Protection
2018-06-16 21:58:53
centos
centos
glibc, nscd security update
2017-03-24 15:31:35
glibc, nscd security update
2017-08-24 01:37:20
nessus
nessus
Oracle Linux 6 : glibc (ELSA-2017-0680)
2017-03-30 00:00:00
RHEL 6 : glibc (RHSA-2017:0680)
2017-03-22 00:00:00
Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20170321)
2017-04-06 00:00:00
osv
osv
eglibc - security update
2016-02-05 00:00:00
eglibc - regression update
2016-02-05 00:00:00
glibc - security update
2016-02-16 00:00:00
oraclelinux
oraclelinux
glibc security update
2017-03-27 00:00:00
glibc security and bug fix update
2017-03-27 00:00:00
glibc security, bug fix, and enhancement update
2017-08-07 00:00:00
openvas
openvas
RedHat Update for glibc RHSA-2017:0680-01
2017-03-22 00:00:00
Debian: Security Advisory (DLA-411-1)
2023-03-08 00:00:00
RedHat Update for glibc RHSA-2017:1916-01
2017-08-04 00:00:00
redhat
redhat
(RHSA-2017:0680) Moderate: glibc security and bug fix update
2017-03-21 06:17:46
(RHSA-2017:1916) Moderate: glibc security, bug fix, and enhancement update
2017-08-01 05:56:24
suse
suse
Security update for glibc (important)
2016-02-19 00:11:49
Security update for glibc (important)
2016-02-16 20:30:43
Security update for glibc (important)
2016-02-16 20:22:56
amazon
amazon
Medium: glibc
2017-08-31 15:52:00
mageia
mageia
Updated glibc packages fix security vulnerabilities
2016-02-19 11:40:43
fedora
fedora
[SECURITY] Fedora 23 Update: glibc-2.22-15.fc23
2016-05-10 18:01:37
debian
debian
[SECURITY] [DSA 3481-1] glibc security update
2016-02-16 14:18:27
[SECURITY] [DSA 3481-1] glibc security update
2016-02-16 14:18:27
[SECURITY] [DSA 3480-1] eglibc security update
2016-02-16 14:18:16
archlinux
archlinux
lib32-glibc: multiple issues
2016-02-17 00:00:00
glibc: multiple issues
2016-02-17 00:00:00
lib32-glibc: unbound stack usage
2016-02-28 00:00:00
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2017-02-19 00:00:00
GNU C Library: Multiple vulnerabilities
2016-02-17 00:00:00
ubuntu
ubuntu
GNU C Library regression
2016-05-26 00:00:00
GNU C Library vulnerabilities
2016-05-25 00:00:00
cloudfoundry
cloudfoundry
USN-2985-2 GNU C Library regression | Cloud Foundry
2016-06-13 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:16:44
Denial Of Service (DoS)
2019-05-02 05:51:55
Arbitrary Code Execution And Denial Of Service (DoS)
2019-05-02 05:51:55
cve
cve
CVE-2014-9761
2016-04-19 21:59:00
CVE-2015-8776
2016-04-19 21:59:00
CVE-2015-8778
2016-04-19 21:59:00
f5
f5
K23946311 : glibc vulnerability CVE-2015-8776
2016-04-01 00:00:00
SOL23946311 - glibc vulnerability CVE-2015-8776
2016-04-01 00:00:00
SOL31211252 - glibc vulnerability CVE-2014-9761
2016-05-31 00:00:00
ubuntucve
ubuntucve
CVE-2015-8776
2016-04-19 00:00:00
CVE-2014-9761
2016-04-19 00:00:00
CVE-2015-8778
2016-04-19 00:00:00
prion
prion
Stack overflow
2016-04-19 21:59:00
Code injection
2016-04-19 21:59:00
Integer overflow
2016-04-19 21:59:00
debiancve
debiancve
CVE-2014-9761
2016-04-19 21:59:00
CVE-2015-8776
2016-04-19 21:59:00
CVE-2015-8778
2016-04-19 21:59:00
packetstorm
packetstorm
Cisco Device Hardcoded Credentials / GNU glibc / BusyBox
2019-09-04 00:00:00
WAGO 852 Industrial Managed Switch Series Code Execution / Hardcoded Credentials
2019-06-13 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1844
2021-07-02 16:56:21

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.043 Low

EPSS

Percentile

92.2%

JSON
Related for DEBIAN:DLA-411-1:340DE
ibm27centos2nessus32osv5oraclelinux4openvas28redhat2suse9amazon1mageia1fedora1debian6archlinux4gentoo2ubuntu2cloudfoundry1veracode4cve4f58ubuntucve4prion4debiancve4packetstorm2rosalinux1