high7.8Public exploit code
CVE-2016-2226
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNU libiberty - Buffer Overflow2017-07-27 · dos · linux · Verified
Impact
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Libiberty | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/05/05/5
- http://www.securityfocus.com/bid/90103
- https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69687
- https://www.exploit-db.com/exploits/42386/
- http://www.openwall.com/lists/oss-security/2016/05/05/5
- http://www.securityfocus.com/bid/90103
- https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69687
- https://www.exploit-db.com/exploits/42386/