CVE-2015-1472: Buffer Overflow
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1472?
CVE-2015-1472 has been classified as a low severity vulnerability, primarily causing denial of service due to buffer overflow.
How do I fix CVE-2015-1472?
To fix CVE-2015-1472, upgrade the GNU C Library to version 2.21 or later.
Which systems are affected by CVE-2015-1472?
CVE-2015-1472 affects multiple versions of Ubuntu Linux and the GNU C Library up to and including version 2.20.
Can CVE-2015-1472 lead to remote code execution?
CVE-2015-1472 does not directly lead to remote code execution, but it can lead to denial of service.
What vulnerabilities are similar to CVE-2015-1472?
Similar vulnerabilities to CVE-2015-1472 may involve buffer overflows or improper memory handling in other libraries.