CVE-2016-6264

Опубликовано: 27 янв. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function.

Ссылки

http://mailman.uclibc-ng.org/pipermail/devel/2016-July/001067.html
Release Notes
Vendor Advisory
http://mailman.uclibc-ng.org/pipermail/devel/2016-May/000890.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/06/29/3
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/21/2
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/21/6
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/91492
Third Party Advisory
VDB Entry
http://mailman.uclibc-ng.org/pipermail/devel/2016-July/001067.html
Release Notes
Vendor Advisory
http://mailman.uclibc-ng.org/pipermail/devel/2016-May/000890.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/06/29/3
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/21/2
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/21/6
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/91492
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:uclibc:uclibc:-:*:*:*:*:*:*:*

cpe:2.3:a:uclibc-ng_project:uclibc-ng:*:*:*:*:*:*:*:*

Версия до 1.0.16 (исключая)

EPSS

Процентиль: 84%

0.02321

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2016-6264

CVSS3: 7.5

ubuntu

около 9 лет назад

CVE-2016-6264

CVSS3: 7.5

debian

около 9 лет назад

Integer signedness error in libc/string/arm/memset.S in uClibc and uCl ...

GHSA-5f7g-9m8m-qhpv

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 84%

0.02321

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-Other