Stack-based buffer overflow in GNU C Library (glibc) - CVE-2015-8982

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU110099

Stack-based buffer overflow in GNU C Library (glibc) - CVE-2015-8982

Published: June 29, 2021 / Updated: June 3, 2025


Vulnerability identifier: #VU110099
CSH Severity: High
CVSS v4: []
CVE-ID: CVE-2015-8982
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing a long string, which triggers a stack-based buffer overflow. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

GNU C Library (glibc)
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
glibc
glibc-devel
glibc-html
glibc-i18ndata
glibc-info
glibc-locale
glibc-profile
nscd
glibc-32bit
glibc-devel-32bit
glibc-locale-32bit
glibc-profile-32bit
glibc-debuginfo
glibc-debugsource
glibc-debuginfo-32bit

How to mitigate CVE-2015-8982

Install update from vendor's website.

GNU C Library (glibc) - update to 2.21
glibc - update to 2.11.3-17.110.40.1
glibc-devel - update to 2.11.3-17.110.40.1
glibc-html - update to 2.11.3-17.110.40.1
glibc-i18ndata - update to 2.11.3-17.110.40.1
glibc-info - update to 2.11.3-17.110.40.1
glibc-locale - update to 2.11.3-17.110.40.1
glibc-profile - update to 2.11.3-17.110.40.1
nscd - update to 2.11.3-17.110.40.1
glibc-32bit - update to 2.11.3-17.110.40.1
glibc-devel-32bit - update to 2.11.3-17.110.40.1
glibc-locale-32bit - update to 2.11.3-17.110.40.1
glibc-profile-32bit - update to 2.11.3-17.110.40.1
glibc-debuginfo - update to 2.11.3-17.110.40.1
glibc-debugsource - update to 2.11.3-17.110.40.1
glibc-debuginfo-32bit - update to 2.11.3-17.110.40.1

External References

Related Security Bulletins