Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-4429

Опубликовано: 10 июн. 2016
Источник: debian

Описание

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
glibcfixed2.22-10package
glibcfixed2.19-18+deb8u5jessiepackage
eglibcremovedpackage
eglibcno-dsawheezypackage
libtirpcfixed0.2.5-1.1package
libtirpcno-dsawheezypackage

Примечания

  • https://sourceware.org/bugzilla/show_bug.cgi?id=20112

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 9 лет назад

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

CVSS3: 5.9
redhat
больше 9 лет назад

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

CVSS3: 5.9
nvd
больше 9 лет назад

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

CVSS3: 5.9
github
больше 3 лет назад

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

CVSS3: 5.9
fstec
больше 9 лет назад

Уязвимость функции clntudp_call (sunrpc/clnt_udp.c) в библиотеке GNU C (glibc или libc6), связанная с записью за границами буфера в памяти, позволяющая нарушителю вводить и выполнять произвольные команды или вызвать отказ в обслуживании