CVE-2015-8779: Buffer Overflow
A stack overflow vulnerability in the catopen function was found, causing applications which pass long strings to the catopen function to crash or, potentially execute arbitrary code.
Upstream bug:
https://sourceware.org/bugzilla/showbug.cgi?id=17905
CVE assignment:
http://seclists.org/oss-sec/2016/q1/153
Other sources
Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8779?
CVE-2015-8779 has a severity rating that indicates a potential denial of service or arbitrary code execution risk.
How do I fix CVE-2015-8779?
To fix CVE-2015-8779, upgrade the GNU C Library to version 2.23 or later.
What versions of glibc are affected by CVE-2015-8779?
Versions of glibc prior to 2.23 are affected by CVE-2015-8779.
What is the impact of CVE-2015-8779 on my system?
The impact of CVE-2015-8779 includes the possibility of application crashes and potential arbitrary code execution.
Who can exploit CVE-2015-8779?
CVE-2015-8779 can be exploited by context-dependent attackers through the use of long catalog names.