CVE-2015-3027 Security feature bypass in n/a
Incorrect register allocation in Clang allows bypassing stack-guard protections, enabling attackers to circumvent security mechanisms in compiled C programs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-3027?
CVE-2015-3027 is a medium-severity vulnerability in Apple Xcode, published on 10 Apr 2015.
Official description
Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program.
Weakness: CWE-264
Which versions are affected by CVE-2015-3027?
It affects 1 product.
Products include Apple Xcode.
How do I fix CVE-2015-3027?
No fix has been published for CVE-2015-3027 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-3027 being exploited?
There is no known exploitation of CVE-2015-3027 in the wild and no public exploit code.
Other vulnerabilities in Apple Xcode
Sources
Also known as GHSA-8ghm-9gv2-jj69, UBUNTU-CVE-2015-3027.