CVE-2015-8983

Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to computing a size in bytes, which triggers a heap-based buffer overflow.

Affected products

Alt Linux, Suse, Ubuntu, Glibc

Gnu Glibc

≤ 2.21

Fix

Available

CVSS 3.0

8.1 HIGH

EPSS

3.9% (89th percentile)

Weakness

CWE-190

NVD status

Modified

Published

2017-03-20

No exploit for CVE-2015-8983 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.