CVE-2014-9761

Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.

Affected products

Alt Linux, Centos, Red Hat, Suse, Ubuntu, Glibc

Suse Linux Enterprise Debuginfo

= 11.0

Opensuse

= 13.2

Suse Linux Enterprise Desktop

= 11.0, 12

Suse Linux Enterprise Server

= 11.0, 12

Suse Linux Enterprise Software Development Kit

= 11.0, 12

Suse Suse Linux Enterprise Server

= 12

Fix

Available

CVSS 3.0

9.8 CRITICAL

EPSS

5.2% (92th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2016-04-19