CVE

Id
86259  
CVE No.
CVE-2015-8982  
Status
Candidate  
Description
Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.  
Phase
Assigned (20170214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
758213 86259 CVE-2015-8982 MLIST:[oss-security] 20150213 CVE Requests - glibc overflows (strxfrm)  View
758214 86259 CVE-2015-8982 URL:http://www.openwall.com/lists/oss-security/2015/02/13/3  View
758215 86259 CVE-2015-8982 MLIST:[oss-security] 20170214 Re: Pending CVE requests for glibc  View
758216 86259 CVE-2015-8982 URL:http://www.openwall.com/lists/oss-security/2017/02/14/9  View
758217 86259 CVE-2015-8982 CONFIRM:https://sourceware.org/bugzilla/show_bug.cgi?id=16009  View
758218 86259 CVE-2015-8982 CONFIRM:https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=0f9e585480ed  View
758219 86259 CVE-2015-8982 BID:72602  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
607 JVNDB-2016-001380 Microsoft Office 2007 における任意のコードを実行される脆弱性 Microsoft Office 2007 には、任意のコードを実行される脆弱性が存在します。 CVE-2016-0055 86259 9.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001380.html  View