Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Szabolcs Nagy

#25711of 53,633
9.8Total CVSS
Vulnerabilities · 1
PT-2016-4016
9.8
2016-02-16
Gnu · Glibc · CVE-2015-8778
**Name of the Vulnerable Software and Affected Versions** glibc versions prior to 2.23 **Description** The issue is related to an integer overflow in the GNU C Library, which can be triggered by the size argument to the ` hcreate r` function. This can lead to out-of-bounds heap-memory access, causing a denial of service (application crash) or possibly allowing the execution of arbitrary code. **Recommendations** For versions prior to 2.23, update to version 2.23 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ` hcreate r` function until a patch is available.