NVD

Id
23783  
Name
CVE-2015-1472  
Description
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-04-08  
Modified Date
2016-10-14  
Seq
2015-1472  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126435 23783 CVE-2015-1472 [oss-security] 20150203 Re: CVE request: heap buffer overflow in glibc swscanf  View
126436 23783 CVE-2015-1472 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
126437 23783 CVE-2015-1472 72428  View
126438 23783 CVE-2015-1472 USN-2519-1  View
126439 23783 CVE-2015-1472 GLSA-201602-02  View
126440 23783 CVE-2015-1472 https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commit;h=5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06  View
126441 23783 CVE-2015-1472 [libc-alpha] 20150206 The GNU C Library version 2.21 is now available  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6790 JVNDB-2015-002110 GNU C Library の stdio-common/vfscanf.c 内の ADDW マクロおけるサービス運用妨害 (DoS) の脆弱性 GNU C Library (別名 glibc または libc6) の stdio-common/vfscanf.c 内の ADDW マクロは、メモリの割り当て中データ型のサイズを適切に考慮しないため、サービス運用妨害 (バッファオーバーフロー) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-1472 78697 CVE-2015-1472 23783 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002110.html 2015-02-06 2015-04-09 View