CVE-2016-3706

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library aka glibc or libc6 allows remote attackers to cause a denial of service crash via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for...

UBUNTU-CVE-2016-4429

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

openSUSE Security Update : glibc (openSUSE-2016-699)

This update for glibc fixes the following issues : - glob-altdirfunc.patch: Do not copy dname field of struct dirent CVE-2016-1234, boo969727, BZ 19779 - nss-dns-memleak-2.patch: fix memory leak in nssdnsgethostbyname4r boo973010 - nss-dns-getnetbyname.patch: fix stack overflow in...

Security fix for the ALT Linux 9 package glibc version 6:2.23-alt3

June 9, 2016 Gleb Fotengauer-Malinovskiy 6:2.23-alt3 - Backported upstream fixes for sw bugs: 19648 19703 19861 20005 20010 20012 20111 20112 including fix for CVE-2016-4429. - Backported upstream implementation of group merging NSS...

Fedora Update for glibc FEDORA-2016-b0e67c88b5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for glibc FEDORA-2016-b2dfb591cd

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for glibc FEDORA-2016-b321728d74

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

glibc: getaddrinfo() writes DNS queries to random file descriptors under high load

It was discovered that, under certain circumstances, glibc's getaddrinfo function would send DNS queries to random file descriptors. An attacker could potentially use this flaw to send DNS queries to unintended recipients, resulting in information disclosure or data loss due to the application...

Moderate: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

[SECURITY] Fedora 23 Update: glibc-2.22-17.fc23

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

RHEL 6 : glibc (RHSA-2016:1207)

An update for glibc is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

GNU C Library glob stack buffer overflow vulnerability

glibc is the libc library, or c runtime library, released by GNU. A stack buffer overflow vulnerability exists in the glob implementation of the GNU C Library glibc prior to version 2.24 when using GLOBALTDIRFUNC. An attacker can cause a denial of service via a long name...

CVE-2016-3075

Stack-based buffer overflow in the nssdns implementation of the getnetbyname function in GNU C Library aka glibc before 2.24 allows context-dependent attackers to cause a denial of service stack consumption and application crash via a long name...

Stack overflow

Stack-based buffer overflow in the nssdns implementation of the getnetbyname function in GNU C Library aka glibc before 2.24 allows context-dependent attackers to cause a denial of service stack consumption and application crash via a long name...

Stack overflow

Stack-based buffer overflow in the glob implementation in GNU C Library aka glibc before 2.24, when GLOBALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service crash via a long name...

CVE-2016-3075

CVE-2016-3075 is a stack-based overflow in glibc’s nss_dns getnetbyname implementation (getnetbyname/getnetbyname_r) that can be triggered by excessively long network names, leading to stack consumption and application crash (denial of service). Connected documents identify the vulnerability as a...

CVE-2016-3075

Stack-based buffer overflow in the nssdns implementation of the getnetbyname function in GNU C Library aka glibc before 2.24 allows context-dependent attackers to cause a denial of service stack consumption and application crash via a long name...

CVE-2016-1234

Stack-based buffer overflow in the glob implementation in GNU C Library aka glibc before 2.24, when GLOBALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service crash via a long name...

CVE-2016-1234

Stack-based buffer overflow in the glob implementation in GNU C Library aka glibc before 2.24, when GLOBALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service crash via a long name...

CVE-2016-1234

CVE-2016-1234 affects the glibc glob implementation prior to 2.24, where a stack-based buffer overflow occurs when GLOB_ALTDIRFUNC is used with long names. This can crash the process (DoS). Remediation: upgrade glibc to 2.24 or newer (or apply vendor-specific patches). The CVE is corroborated by ...