Denial Of Service (DoS)

2019-01-1508:52:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

glibc is vulnerable to denial of service (DoS) attacks. The vulnerability exists through a buffer overflow issue in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.

CPENameOperatorVersion
glibceq2.5__18.el5_1.1
glibceq2.5__49.el5_5.6
glibceq2.5__65.el5_7.3
glibceq2.5__49.el5_5.5
glibceq2.5__42.el5_4.2
glibceq2.5__49.el5_5.7
glibceq2.5__58.el5_6.3
glibceq2.5__58.el5_6.4
glibceq2.5__49.el5_5.4
glibceq2.5__81.el5_8.7

Name	Operator	Version
glibc	eq	2.5__18.el5_1.1
glibc	eq	2.5__49.el5_5.6
glibc	eq	2.5__65.el5_7.3
glibc	eq	2.5__49.el5_5.5
glibc	eq	2.5__42.el5_4.2
glibc	eq	2.5__49.el5_5.7
glibc	eq	2.5__58.el5_6.3
glibc	eq	2.5__58.el5_6.4
glibc	eq	2.5__49.el5_5.4
glibc	eq	2.5__81.el5_8.7