REDHAT-BUG-995839: Medium severity gnu c library vulnerability
An out-of buffer bounds write flaw was found in the way the readdirr function in glibc, the GNU C Library, handled a directory entry whose file name name contained more byte than the NAMEMAX characters constant indicated. An attacker could provide a specially-crafted (local) NTFS or (remote) CIFS file system that, when processed in an application using the readdirr() function, would cause that application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.
Upstream bug report: [1] http://sourceware.org/bugzilla/showbug.cgi?id=14699
Latest patch proposal: [2] http://sourceware.org/ml/libc-alpha/2013-05/msg00445.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-995839?
The severity of REDHAT-BUG-995839 is considered high due to the potential for exploitation through out-of-bounds write vulnerabilities.
How do I fix REDHAT-BUG-995839?
You can fix REDHAT-BUG-995839 by updating the GNU C Library to the latest patched version that addresses this vulnerability.
What are the potential impacts of REDHAT-BUG-995839?
The potential impacts of REDHAT-BUG-995839 include data corruption, application crashes, or remote code execution if exploited.
Who is affected by REDHAT-BUG-995839?
Users of the GNU C Library in environments that handle NTFS or CIFS directories are affected by REDHAT-BUG-995839.
How is REDHAT-BUG-995839 exploited?
REDHAT-BUG-995839 can be exploited by an attacker providing specially-crafted directory entries that exceed the NAME_MAX character limit.