PT-2015-6057 · Llvm · Clang+1

Publicado 2015-04-10 · Atualizado 2016-12-03 · CVE-2015-3027

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions LLVM versions prior to 6.3

Description The issue is related to incorrect register allocation in Clang, which can lead to stack storage for stack cookie pointers. This might allow attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program.

Recommendations For versions prior to 6.3, update to version 6.3 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-3027

Produtos afetados

Clang

Llvm

Referências · 8

• http://securitytracker.com/id/1032081 · Nota
• https://ubuntu.com/security/CVE-2015-3027 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3027 · Aviso do Fabricante
• https://support.apple.com/HT204663 · Aviso do Fabricante
• http://securityfocus.com/bid/73987 · Nota
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00004.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-3027 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2015-3027 · Nota de Segurança