ISOMAN

CVE

CVE-2014-9761

Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html
  2. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
  3. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html
  4. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
  5. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html
  6. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html
  7. http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
  8. http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
  9. http://rhn.redhat.com/errata/RHSA-2017-0680.html
  10. http://seclists.org/fulldisclosure/2019/Jun/18
  11. http://seclists.org/fulldisclosure/2019/Sep/7
  12. http://www.openwall.com/lists/oss-security/2016/01/19/11
  13. http://www.openwall.com/lists/oss-security/2016/01/20/1
  14. http://www.securityfocus.com/bid/83306
  15. http://www.ubuntu.com/usn/USN-2985-1
  16. http://www.ubuntu.com/usn/USN-2985-2
  17. https://access.redhat.com/errata/RHSA-2017:1916
  18. https://seclists.org/bugtraq/2019/Jun/14
  19. https://seclists.org/bugtraq/2019/Sep/7
  20. https://security.gentoo.org/glsa/201702-11