Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um beliebigen Code auszuführen, um Sicherheitsfunktionen zu umgehen, um Informationen offenzulegen oder um einen Denial of Service Zustand hervorzurufen.
Product
Die GNU libc ist die Basis C Bibliothek unter Linux sowie anderen Unix-Betriebssystemen, welche die Systemaufrufe sowie Basisfunktionalität bereitstellt.
Vulnerabilities 5
-
Unscored —
Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent att…
-
Unscored —
The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause…
-
Unscored —
The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to …
-
Unscored —
Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a de…
-
Unscored —
Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows contex…
Revision history
-
#21
Neue Updates von IBM aufgenommen
-
#20
Added references
-
#19
Added references
-
#18
New remediations available
-
#17
New remediations available
-
#15
New remediations available
-
#16
Version nicht vorhanden
-
#13
New remediations available
-
#14
Version nicht vorhanden
-
#11
New remediations available
-
#12
Version nicht vorhanden
-
#10
New remediations available
-
#4
New remediations available
-
#5
New remediations available
-
#6
New remediations available
-
#7
New remediations available
-
#8
New remediations available
-
#9
Version nicht vorhanden
-
#1
Initial Release
-
#2
Version nicht vorhanden
-
#3
Version nicht vorhanden
References
-
IBM Security Bulletin 868518 vom 2023-04-14
https://www.ibm.com/support/pages/node/868518
-
OSS Security Mailinglist vom 2016-01-19
http://seclists.org/oss-sec/2016/q1/153
-
glibc catopen() Multiple unbounded stack allocations POC vom 2016-01-19
https://cxsecurity.com/issue/WLB-2016010149
-
Debian Security Advisory DSA-3481 vom 2016-02-17
https://www.debian.org/security/2016/dsa-3481
-
Debian Security Advisory DSA-3480 vom 2016-02-17
https://www.debian.org/security/2016/dsa-3480
-
SUSE Security Update SUSE-SU-2016:0470-1 vom 2016-02-16
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
-
SUSE Security Update SUSE-SU-2016:0471-1 vom 2016-02-16
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html
-
SUSE Security Update SUSE-SU-2016:0473-1 vom 2016-02-16
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html
-
SUSE Security Update SUSE-SU-2016:0472-1 vom 2016-02-16
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
-
SUSE Security Update SUSE-SU-2016:0748-1 vom 2016-03-14
https://www.suse.com/support/update/announcement/2016/suse-su-20160748-1.html
-
SUSE Security Update SUSE-SU-2016:0778-1 vom 2016-03-15
https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html
-
SUSE Security Update SUSE-SU-2016:0778-1 vom 2016-03-15
https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html
-
F5 Security Advisory sol23946311 vom 2016-04-01
https://support.f5.com/kb/en-us/solutions/public/k/23/sol23946311.html?ref=rss
-
F5 Security Advisory sol51079478 vom 2016-04-07
https://support.f5.com/kb/en-us/solutions/public/k/51/sol51079478.html
-
F5 Security Advisory sol39250133 vom 2016-04-20
https://support.f5.com/kb/en-us/solutions/public/k/39/sol39250133.html?ref=rss
-
Ubuntu Security Notice USN-2985-1 vom 2016-05-26
http://www.ubuntu.com/usn/usn-2985-1/
-
Ubuntu Security Notice USN-2985-2 vom 2016-05-26
http://www.ubuntu.com/usn/usn-2985-2/
-
F5 Security Advisory SOL31211252 vom 2016-06-01
https://support.f5.com/kb/en-us/solutions/public/k/31/sol31211252.html
-
Red Hat Security Advisory RHSA-2017:0680 vom 2017-03-21
https://access.redhat.com/errata/RHSA-2017:0680
-
RedHat Security Advisory: RHSA-2017:1916
https://access.redhat.com/errata/RHSA-2017:1916
-
Oracle Linux Security Advisory ELSA-2017-3601 vom 2017-08-09
http://linux.oracle.com/errata/ELSA-2017-3601.html