CVE-2015-8983 Integer overflow in n/a
An integer overflow in glibc's wide string handling can lead to heap-based buffer overflows, causing application crashes or arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-8983?
CVE-2015-8983 is a high-severity vulnerability in Gnu Glibc, published on 20 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to computing a size in bytes, which triggers a heap-based buffer overflow.
Weakness: CWE-190
Which versions are affected by CVE-2015-8983?
It affects 1 product.
Products include Gnu Glibc.
How do I fix CVE-2015-8983?
Upgrade to a fixed version.
Is CVE-2015-8983 being exploited?
There is no known exploitation of CVE-2015-8983 in the wild and no public exploit code.
Other vulnerabilities in Gnu Glibc
Sources
Also known as DEBIAN-CVE-2015-8983, GHSA-77qx-ffg2-4jrv, UBUNTU-CVE-2015-8983.