PT-2016-5667 · Gnu+3 · Glibc+3

Michael Petlan · Published 2016-02-19 · Updated 2024-06-15 · CVE-2016-3706

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions glibc (affected versions not specified)

Description The issue is a stack-based buffer overflow in the getaddrinfo function, which can be exploited by remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving hostent conversion. The problem exists due to an incomplete fix for a previous issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2016-1135

ALT-PU-2016-1480

CVE-2016-3706

DLA-494-1

MGASA-2016-0206

OPENSUSE-SU-2024:10154-1

SUSE-SU-2016:1721-1

SUSE-SU-2016:1733-1

SUSE-SU-2016:2156-1

SUSE-SU-2017:2699-1

SUSE-SU-2017:2700-1

USN-3239-1

USN-3239-2

USN-3239-3

Affected Products

Alt Linux

Suse

Ubuntu

Glibc

References · 117

• 🔥 https://github.com/fjserna/CVE-2015-7547 · Exploit
• 🔥 https://github.com/eSentire/cve-2015-7547-public · Exploit
• 🔥 https://github.com/jgajek/cve-2015-7547 · Exploit
• 🔥 https://github.com/cakuzo/CVE-2015-7547 · Exploit
• https://ubuntu.com/security/CVE-2016-6323 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29573 · Security Note
• https://bdu.fstec.ru/vul/2017-00766 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8776 · Security Note
• https://ubuntu.com/security/CVE-2016-1234 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8982 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-5180 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07717 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7547 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:1721-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-3706 · Security Note