NVD

Id
28829  
Name
CVE-2015-8777  
Description
The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-01-20  
Modified Date
2016-12-05  
Seq
2015-8777  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151798 28829 CVE-2015-8777 http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html  View
151799 28829 CVE-2015-8777 FEDORA-2016-0480defc94  View
151800 28829 CVE-2015-8777 SUSE-SU-2016:0470  View
151801 28829 CVE-2015-8777 SUSE-SU-2016:0471  View
151802 28829 CVE-2015-8777 SUSE-SU-2016:0472  View
151803 28829 CVE-2015-8777 SUSE-SU-2016:0473  View
151804 28829 CVE-2015-8777 DSA-3480  View
151805 28829 CVE-2015-8777 [oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23  View
151806 28829 CVE-2015-8777 81469  View
151807 28829 CVE-2015-8777 1034811  View
151808 28829 CVE-2015-8777 USN-2985-1  View
151809 28829 CVE-2015-8777 USN-2985-2  View
151810 28829 CVE-2015-8777 https://sourceware.org/bugzilla/show_bug.cgi?id=18928  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11500 JVNDB-2015-006820 GNU C Library の elf/rtld.c の process_envvars 関数におけるポインタガード (pointer-guarding) 保護メカニズムを回避される脆弱性 GNU C Library (別名 glibc または libc6) の elf/rtld.c の process_envvars 関数には、ポインタガード (pointer-guarding) 保護メカニズムを回避される脆弱性が存在します。 CVE-2015-8777 86002 CVE-2015-8777 28829 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006820.html 2015-10-15 2016-03-01 View