Stack-based buffer overflow in Glibc - CVE-2015-8982
Published: June 29, 2021 / Updated: June 3, 2025
Vulnerability identifier: #VU110099
CSH Severity: High
CVSS v4.0:
CVE-ID: CVE-2015-8982
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: GNU
Affected software:
Glibc
Glibc
Detailed vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing a long string, which triggers a stack-based buffer overflow. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
How to mitigate CVE-2015-8982
Install update from vendor's website.
Sources
- https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=0f9e585480ed
- https://sourceware.org/bugzilla/show_bug.cgi?id=16009
- http://www.openwall.com/lists/oss-security/2017/02/14/9
- http://www.openwall.com/lists/oss-security/2015/02/13/3
- http://www.securityfocus.com/bid/72602
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E