Heap-based buffer overflow in GNU C Library (glibc) - CVE-2015-8983

Vulnerability identifier: #VU110098

CSH Severity: High

CVSS v4: []

CVE-ID: CVE-2015-8983

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22. A remote attacker can use vectors related to computing a size in bytes to trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

GNU C Library (glibc)
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
glibc
glibc-devel
glibc-html
glibc-i18ndata
glibc-info
glibc-locale
glibc-profile
nscd
glibc-32bit
glibc-devel-32bit
glibc-locale-32bit
glibc-profile-32bit
glibc-debuginfo
glibc-debugsource
glibc-debuginfo-32bit

Install update from vendor's website.

GNU C Library (glibc) - update to 2.22
glibc - update to 2.11.3-17.110.40.1
glibc-devel - update to 2.11.3-17.110.40.1
glibc-html - update to 2.11.3-17.110.40.1
glibc-i18ndata - update to 2.11.3-17.110.40.1
glibc-info - update to 2.11.3-17.110.40.1
glibc-locale - update to 2.11.3-17.110.40.1
glibc-profile - update to 2.11.3-17.110.40.1
nscd - update to 2.11.3-17.110.40.1
glibc-32bit - update to 2.11.3-17.110.40.1
glibc-devel-32bit - update to 2.11.3-17.110.40.1
glibc-locale-32bit - update to 2.11.3-17.110.40.1
glibc-profile-32bit - update to 2.11.3-17.110.40.1
glibc-debuginfo - update to 2.11.3-17.110.40.1
glibc-debugsource - update to 2.11.3-17.110.40.1
glibc-debuginfo-32bit - update to 2.11.3-17.110.40.1

• http://www.openwall.com/lists/oss-security/2017/02/14/9
• http://www.securityfocus.com/bid/72740
• https://sourceware.org/bugzilla/show_bug.cgi?id=17269
• https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=bdf1ff052a8e23d637f2c838fa5642d78fcedc33
• https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html

• Multiple vulnerabilities in GNU Glibc
• SUSE update for glibc