NVD

Id
28831  
Name
CVE-2015-8779  
Description
Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-19  
Modified Date
2016-12-02  
Seq
2015-8779  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151827 28831 CVE-2015-8779 FEDORA-2016-68abc0be35  View
151828 28831 CVE-2015-8779 SUSE-SU-2016:0470  View
151829 28831 CVE-2015-8779 SUSE-SU-2016:0471  View
151830 28831 CVE-2015-8779 SUSE-SU-2016:0472  View
151831 28831 CVE-2015-8779 SUSE-SU-2016:0473  View
151832 28831 CVE-2015-8779 openSUSE-SU-2016:0510  View
151833 28831 CVE-2015-8779 DSA-3480  View
151834 28831 CVE-2015-8779 DSA-3481  View
151835 28831 CVE-2015-8779 [oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23  View
151836 28831 CVE-2015-8779 [oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23  View
151837 28831 CVE-2015-8779 82244  View
151838 28831 CVE-2015-8779 USN-2985-1  View
151839 28831 CVE-2015-8779 USN-2985-2  View
151840 28831 CVE-2015-8779 GLSA-201602-02  View
151841 28831 CVE-2015-8779 https://sourceware.org/bugzilla/show_bug.cgi?id=17905  View
151842 28831 CVE-2015-8779 [libc-alpha] 20160219 The GNU C Library version 2.23 is now available  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11775 JVNDB-2015-007095 GNU C Library の catopen 関数におけるスタックベースのバッファオーバーフローの脆弱性 GNU C Library (別名 glibc または libc6) の catopen 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-8779 86004 CVE-2015-8779 28831 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007095.html 2015-08-08 2016-04-26 View