CVE-2015-8982 Integer overflow in n/a
An integer overflow in glibc's strxfrm function allows attackers to cause a crash or execute arbitrary code via a long string.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-8982?
CVE-2015-8982 is a high-severity vulnerability in Gnu Glibc, published on 15 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
Weakness: CWE-190
Which versions are affected by CVE-2015-8982?
It affects 1 product.
Products include Gnu Glibc.
How do I fix CVE-2015-8982?
Upgrade to a fixed version.
Is CVE-2015-8982 being exploited?
There is no known exploitation of CVE-2015-8982 in the wild and no public exploit code.
Other vulnerabilities in Gnu Glibc
Sources
Also known as DEBIAN-CVE-2015-8982, GHSA-qw97-54gm-4j6w, UBUNTU-CVE-2015-8982.