CVE-2016-3706: Buffer Overflow
Last updated 24 July 2024
Other sources
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3706?
CVE-2016-3706 is classified as a critical vulnerability due to its potential to cause denial of service.
How do I fix CVE-2016-3706?
To fix CVE-2016-3706, update the affected GNU C Library (glibc) to version 2.31-13+deb11u11 or newer.
Which software is affected by CVE-2016-3706?
CVE-2016-3706 affects GNU C Library versions up to 2.23, as well as specific versions of Android and openSUSE 13.2.
What type of vulnerability is CVE-2016-3706?
CVE-2016-3706 is a stack-based buffer overflow vulnerability occurring in the getaddrinfo function.
Can CVE-2016-3706 be exploited remotely?
Yes, CVE-2016-3706 can be exploited remotely, leading to service disruption by crashing applications using the vulnerable function.