NVD

Id
19475  
Name
CVE-2016-3706  
Description
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-02-06  
Published
2016-06-10  
Modified Date
2017-02-01  
Seq
2016-3706  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107225 19475 CVE-2016-3706 openSUSE-SU-2016:1527  View
107226 19475 CVE-2016-3706 openSUSE-SU-2016:1779  View
107227 19475 CVE-2016-3706 88440  View
107228 19475 CVE-2016-3706 https://sourceware.org/bugzilla/show_bug.cgi?id=20010  View
107229 19475 CVE-2016-3706 https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=4ab2ab03d4351914ee53248dc5aef4a8c88ff8b9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2319 JVNDB-2016-003092 GNU C Library の sysdeps/posix/getaddrinfo.c の getaddrinfo 関数におけるスタックベースのバッファオーバーフローの脆弱性 GNU C Library (別名 glibc または libc6) の sysdeps/posix/getaddrinfo.c の getaddrinfo 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-3706 90212 CVE-2016-3706 19475 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003092.html 2016-04-29 2016-06-14 View