medium5.9
CVE-2015-8985
The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and ap…
Impact
The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Glibc | before 2.28 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2017/02/14/9
- http://www.securityfocus.com/bid/76916
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779392
- https://security.gentoo.org/glsa/201908-06
- http://www.openwall.com/lists/oss-security/2017/02/14/9
- http://www.securityfocus.com/bid/76916
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779392
- https://security.gentoo.org/glsa/201908-06