CVE-2015-8779

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.

Weaknesses (CWE)

CWE-119

Affected Products (24)

suse · linux_enterprise_debuginfovulnerable

opensuse · opensusevulnerable

suse · linux_enterprise_desktopvulnerable

suse · linux_enterprise_servervulnerable

suse · linux_enterprise_software_development_kitvulnerable

suse · suse_linux_enterprise_servervulnerable

canonical · ubuntu_linuxvulnerable

debian · debian_linuxvulnerable

gnu · glibcvulnerable

fedoraproject · fedoravulnerable

References (20)

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html

http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html

http://rhn.redhat.com/errata/RHSA-2017-0680.html

http://seclists.org/fulldisclosure/2019/Sep/7

http://www.debian.org/security/2016/dsa-3480

http://www.debian.org/security/2016/dsa-3481

http://www.openwall.com/lists/oss-security/2016/01/19/11

http://www.openwall.com/lists/oss-security/2016/01/20/1

http://www.securityfocus.com/bid/82244

http://www.ubuntu.com/usn/USN-2985-1

http://www.ubuntu.com/usn/USN-2985-2

https://access.redhat.com/errata/RHSA-2017:1916

https://seclists.org/bugtraq/2019/Sep/7

https://security.gentoo.org/glsa/201602-02

https://security.gentoo.org/glsa/201702-11