CVE-2015-8983
Description
Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to computing a size in bytes, which triggers a heap-based buffer overflow.
Risk Information
Base Score
8.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.525
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| GNU C Library (USN-3239-1) libc6_2.23-0ubuntu6_i386.deb | Linux |
| GNU C Library (USN-3239-1) libc6_2.23-0ubuntu6_amd64.deb | Linux |
| Glibc update (ELSA-2021-0348) glibc-2.17-322.0.1.el7_9.i686.rpm | Linux |
| Glibc update (ELSA-2021-0348) glibc-2.17-322.0.1.el7_9.x86_64.rpm | Linux |
| Glibc-common update (ELSA-2021-0348) glibc-common-2.17-322.0.1.el7_9.x86_64.rpm | Linux |
| Glibc-devel update (ELSA-2021-0348) glibc-devel-2.17-322.0.1.el7_9.i686.rpm | Linux |
| Glibc-devel update (ELSA-2021-0348) glibc-devel-2.17-322.0.1.el7_9.x86_64.rpm | Linux |
| Glibc-headers update (ELSA-2021-0348) glibc-headers-2.17-322.0.1.el7_9.x86_64.rpm | Linux |
| Glibc-static update (ELSA-2021-0348) glibc-static-2.17-322.0.1.el7_9.i686.rpm | Linux |
| Glibc-static update (ELSA-2021-0348) glibc-static-2.17-322.0.1.el7_9.x86_64.rpm | Linux |
| Glibc-utils update (ELSA-2021-0348) glibc-utils-2.17-322.0.1.el7_9.x86_64.rpm | Linux |
| Nscd update (ELSA-2021-0348) nscd-2.17-322.0.1.el7_9.x86_64.rpm | Linux |
| Integer Overflow or Wraparound Vulnerability (CVE-2015-8983) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234