Description
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | nscd +7 | 2.17-106.el7_2.4 | RHSA-2016:0176 |
| RHEL 6 | nscd +7 | 2.12-1.166.el6_7.1 | RHBA-2015:1465 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | nscd +6 | 2.17-106.0.1.el7_2.4 | ELSA-2016-0176 |
Advisories 4
- RHSA-2016:0176 Red Hat Security Advisory: glibc security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHBA-2015:1465 Red Hat Bug Fix Advisory: glibc bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- WID-SEC-2023-0973 GNU libc: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 16, 2023
- ELSA-2016-0176 Critical: glibc security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Feb 16, 2016
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1246713
- 84172 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1256285
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1293976
- RHSA-2016:0176 vendor-advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10150