The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2017/02/14/9 | Mailing List Patch Third Party Advisory |
| http://www.securityfocus.com/bid/76916 | Third Party Advisory VDB Entry |
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779392 | Issue Tracking Third Party Advisory |
| https://security.gentoo.org/glsa/201908-06 | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2017/02/14/9 | Mailing List Patch Third Party Advisory |
| http://www.securityfocus.com/bid/76916 | Third Party Advisory VDB Entry |
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779392 | Issue Tracking Third Party Advisory |
| https://security.gentoo.org/glsa/201908-06 | Third Party Advisory |
Configurations
History
21 Nov 2024, 02:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2017/02/14/9 - Mailing List, Patch, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/76916 - Third Party Advisory, VDB Entry | |
| References | () https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779392 - Issue Tracking, Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/201908-06 - Third Party Advisory |
Information
Published : 2017-03-20 16:59
Updated : 2024-11-21 02:39
NVD link : CVE-2015-8985
Mitre link : CVE-2015-8985
CVE.ORG link : CVE-2015-8985
JSON object : View
Products Affected
gnu
- glibc
CWE
CWE-19
Data Processing Errors