CVE-2016-1234high
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.
References
https://sourceware.org/bugzilla/show_bug.cgi?id=19779
http://www.openwall.com/lists/oss-security/2016/03/07/16
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=5171f3079f2cc53e0548fc4967361f4d1ce9d7ea
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html
http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html
http://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html
http://www.securityfocus.com/bid/84204
https://security.gentoo.org/glsa/201702-11
https://lists.apache.org/thread.html/[email protected]%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/[email protected]%3Cissues.bookkeeper.apache.org%3E
Details
Source: MITRE
Published: 2016-06-01
Updated: 2021-09-01
Type: CWE-119
Risk Information
CVSS v2
Base Score: 5
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 10
Severity: MEDIUM
CVSS v3
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 3.9
Severity: HIGH
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
Configuration 3
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 145145 | EulerOS 2.0 SP3 : glibc (EulerOS-SA-2021-1069) | Nessus | Huawei Local Security Checks | high |
| 135640 | EulerOS Virtualization 3.0.2.2 : glibc (EulerOS-SA-2020-1478) | Nessus | Huawei Local Security Checks | medium |
| 130864 | EulerOS 2.0 SP5 : glibc (EulerOS-SA-2019-2155) | Nessus | Huawei Local Security Checks | medium |
| 128896 | EulerOS 2.0 SP2 : glibc (EulerOS-SA-2019-1844) | Nessus | Huawei Local Security Checks | medium |
| 121682 | Photon OS 1.0: Glibc PHSA-2017-0013 | Nessus | PhotonOS Local Security Checks | high |
| 111862 | Photon OS 1.0: Cracklib / Glibc / Httpd / Libevent / Libgcrypt PHSA-2017-0013 (deprecated) | Nessus | PhotonOS Local Security Checks | critical |
| 97936 | Ubuntu 12.04 LTS : eglibc regression (USN-3239-3) | Nessus | Ubuntu Local Security Checks | high |
| 97887 | Ubuntu 12.04 LTS / 14.04 LTS / 16.04 LTS : eglibc, glibc regression (USN-3239-2) | Nessus | Ubuntu Local Security Checks | high |
| 97856 | Ubuntu 12.04 LTS / 14.04 LTS / 16.04 LTS : eglibc, glibc vulnerabilities (USN-3239-1) | Nessus | Ubuntu Local Security Checks | high |
| 97254 | GLSA-201702-11 : GNU C Library: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | critical |
| 93309 | SUSE SLES11 Security Update : glibc (SUSE-SU-2016:2156-1) | Nessus | SuSE Local Security Checks | high |
| 93175 | SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2016:1733-1) | Nessus | SuSE Local Security Checks | high |
| 93173 | SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2016:1721-1) | Nessus | SuSE Local Security Checks | high |
| 92146 | Fedora 24 : glibc (2016-b321728d74) | Nessus | Fedora Local Security Checks | high |
| 91987 | openSUSE Security Update : glibc (openSUSE-2016-852) | Nessus | SuSE Local Security Checks | critical |
| 91534 | openSUSE Security Update : glibc (openSUSE-2016-699) | Nessus | SuSE Local Security Checks | high |
| 91361 | Debian DLA-494-1 : eglibc security update | Nessus | Debian Local Security Checks | high |
| 91063 | Fedora 23 : glibc-2.22-15.fc23 (2016-68abc0be35) | Nessus | Fedora Local Security Checks | critical |