NVD

Id
36346  
Name
CVE-2014-9761  
Description
Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-19  
Modified Date
2016-11-28  
Seq
2014-9761  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185926 36346 CVE-2014-9761 FEDORA-2016-68abc0be35  View
185927 36346 CVE-2014-9761 SUSE-SU-2016:0470  View
185928 36346 CVE-2014-9761 SUSE-SU-2016:0471  View
185929 36346 CVE-2014-9761 SUSE-SU-2016:0472  View
185930 36346 CVE-2014-9761 SUSE-SU-2016:0473  View
185931 36346 CVE-2014-9761 openSUSE-SU-2016:0510  View
185932 36346 CVE-2014-9761 [oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23  View
185933 36346 CVE-2014-9761 [oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23  View
185934 36346 CVE-2014-9761 83306  View
185935 36346 CVE-2014-9761 USN-2985-1  View
185936 36346 CVE-2014-9761 USN-2985-2  View
185937 36346 CVE-2014-9761 https://sourceware.org/bugzilla/show_bug.cgi?id=16962  View
185938 36346 CVE-2014-9761 [libc-alpha] 20160219 The GNU C Library version 2.23 is now available  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19283 JVNDB-2014-008161 GNU C Library におけるスタックベースのバッファオーバーフローの脆弱性 GNU C Library (別名 glibc または libc6) には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-9761 77054 CVE-2014-9761 36346 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008161.html 2014-05-19 2016-04-26 View