CVE-2016-3075: Buffer Overflow
Stack-based buffer overflow in the nssdns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3075?
CVE-2016-3075 has a severity rating that allows for denial of service attacks through a stack-based buffer overflow.
How do I fix CVE-2016-3075?
To fix CVE-2016-3075, update the GNU C Library (glibc) to version 2.24 or later on affected systems.
What systems are affected by CVE-2016-3075?
CVE-2016-3075 affects systems running glibc prior to version 2.24, including specific versions of openSUSE, Fedora, and Ubuntu.
What is the cause of CVE-2016-3075 vulnerability?
CVE-2016-3075 is caused by a stack-based buffer overflow in the nss_dns implementation of the getnetbyname function.
What potential impact does CVE-2016-3075 have on systems?
The potential impact of CVE-2016-3075 includes stack consumption and application crashes, leading to denial of service.