Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-8121
HistoryMar 27, 2015 - 12:00 a.m.

CVE-2014-8121

2015-03-2700:00:00
ubuntu.com
ubuntu.com
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

88.9%

DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU
C Library (aka glibc or libc6) 2.21 and earlier does not properly check if
a file is open, which allows remote attackers to cause a denial of service
(infinite loop) by performing a look-up on a database while iterating over
it, which triggers the file pointer to be reset.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarcheglibc< 2.15-0ubuntu10.14UNKNOWN
ubuntu14.04noarcheglibc< 2.19-0ubuntu6.8UNKNOWN
ubuntu15.10noarchglibc< 2.21-0ubuntu4.2UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

88.9%