CVE

Id
93143  
CVE No.
CVE-2016-6323  
Status
Candidate  
Description
The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.  
Phase
Assigned (20160726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792886 93143 CVE-2016-6323 MLIST:[oss-security] 20160818 CVE-2016-6323: Missing unwind information on ARM EABI (32-bit) causes backtrace generation to hang  View
792887 93143 CVE-2016-6323 URL:http://www.openwall.com/lists/oss-security/2016/08/18/12  View
792888 93143 CVE-2016-6323 CONFIRM:https://sourceware.org/bugzilla/show_bug.cgi?id=20435  View
792889 93143 CVE-2016-6323 CONFIRM:https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=9e2ff6c9cc54c0b4402b8d49e4abe7000fde7617  View
792890 93143 CVE-2016-6323 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21995039  View
792891 93143 CVE-2016-6323 FEDORA:FEDORA-2016-57cba655d5  View
792892 93143 CVE-2016-6323 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LVWSAZVBTLALXF4SCBPDV3FY6J22DXLZ/  View
792893 93143 CVE-2016-6323 FEDORA:FEDORA-2016-5f050a0a6d  View
792894 93143 CVE-2016-6323 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KTXSOVCRDGBIB4WCIDAGYYUBESXZ4IGK/  View
792895 93143 CVE-2016-6323 FEDORA:FEDORA-2016-87dde780b8  View
792896 93143 CVE-2016-6323 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WO7IMEYWZ2WTXGGMZBWWSDCUMFN63XOB/  View
792897 93143 CVE-2016-6323 SUSE:openSUSE-SU-2016:2443  View
792898 93143 CVE-2016-6323 URL:http://lists.opensuse.org/opensuse-updates/2016-10/msg00009.html  View
792899 93143 CVE-2016-6323 BID:92532  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4302 JVNDB-2016-005075 複数の Pivotal Cloud Foundry 製品の OAuth 認証の実装における暗黙的アクセストークンを取得される脆弱性 複数の Pivotal Cloud Foundry (PCF) 製品の OAuth 認証の実装は、リダイレクト URI のサブドメインを誤って処理するため、暗黙的アクセストークンを取得される脆弱性が存在します。 CVE-2016-6636 93143 5 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005075.html  View