CVE-2015-1473
Published: 5 February 2015
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow context-dependent attackers to cause a denial of service (segmentation violation) or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.
Notes
| Author | Note |
|---|---|
| tyhicks | Note that the upstream bug #16618 contains the issue of CVE-2015-1472 *and* this CVE |
| mdeslaur | fixed in same commit as CVE-2015-1472 |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
eglibc Launchpad, Ubuntu, Debian |
lucid |
Not vulnerable
(__libc_use_alloca() not present)
|
| precise |
Released
(2.15-0ubuntu10.11)
|
|
| trusty |
Released
(2.19-0ubuntu6.6)
|
|
| upstream |
Needed
|
|
| utopic |
Does not exist
|
|
|
glibc Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needed
|
|
| utopic |
Released
(2.19-10ubuntu2.3)
|
|
|
Patches: upstream: https://sourceware.org/git/?p=glibc.git;a=commit;h=5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06 |
||