CVE-2016-3075

HIGH7.5

Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2

Published Jun 1, 2016

Modified 1 years ago

Details

Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.

References

ADVISORY

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html

ADVISORY

http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html

ADVISORY

http://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html

ADVISORY

http://rhn.redhat.com/errata/RHSA-2016-2573.html

WEB

http://www.securityfocus.com/bid/85732

ADVISORY