NetSight
IP …
medium5.0

CVE-2014-8121

DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is…

Impact

DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.

Affected products

VendorProductAffected versions
SuseSuse Linux Enterprise Desktop
Version 11
SuseSuse Linux Enterprise Server
Version 11.0
GnuGlibc
through 2.21
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10

Weakness classification

CWE-17

References