CVE-2016-4429: Buffer Overflow
Last updated 25 August 2025
Other sources
Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/glibcto a version that resolves this vulnerability.Fixed in 2.31-13+deb11u11Fixed in 2.31-13+deb11u13Fixed in 2.36-9+deb12u13Fixed in 2.36-9+deb12u7Fixed in 2.41-12+deb13u1Fixed in 2.42-11Fixed in 2.42-13 - Upgrade
Upgrade
debian/libtirpcto a version that resolves this vulnerability.Fixed in 1.3.1-1+deb11u1Fixed in 1.3.3+ds-1Fixed in 1.3.6+ds-1
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4429?
CVE-2016-4429 has a severity rating that suggests it can lead to a denial of service condition.
How do I fix CVE-2016-4429?
To fix CVE-2016-4429, update the GNU C Library (glibc) to the latest version provided by your Linux distribution.
What are the potential impacts of CVE-2016-4429?
CVE-2016-4429 can cause application crashes and lead to service outages due to a stack-based buffer overflow.
Which versions of GNU C Library are affected by CVE-2016-4429?
CVE-2016-4429 affects versions of GNU C Library prior to 2.24.
What platforms are influenced by CVE-2016-4429?
CVE-2016-4429 impacts multiple platforms including various versions of Ubuntu, openSUSE, and Android.