CVE-2015-8985: Medium severity gnu c library (glibc) vulnerability
Published Feb 28, 2015
·Updated
The popfailstack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.
Affected Software
1 affected component
GNU glibc<2.28
Remediation
Patch Available
Event History
Feb 28, 2015
Data Sourced
12:21 AM
SeverityAffected Software
Mar 20, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8985?
CVE-2015-8985 has a medium severity level as it allows denial of service via application crashes.
2
How do I fix CVE-2015-8985?
To fix CVE-2015-8985, upgrade to a version of GNU C Library greater than 2.28.
3
What types of attacks are possible with CVE-2015-8985?
CVE-2015-8985 allows context-dependent attackers to exploit regular expression processing vulnerabilities.
4
Which versions of glibc are affected by CVE-2015-8985?
CVE-2015-8985 affects glibc versions before 2.28.
5
What is the potential impact of CVE-2015-8985 on applications?
The potential impact of CVE-2015-8985 is application crashes due to assertion failures.