PT-2017-4265 · Gnu+2 · Gnu C Library+2

Jakub Wilk · Published 2017-03-20 · Updated 2022-11-30 · CVE-2015-8985

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GNU C Library (affected versions not specified)

Description The issue is related to the pop fail stack function in the GNU C Library, which can be exploited by attackers to cause a denial of service, resulting in an assertion failure and application crash. This is due to improper data handling related to extended regular expression processing. The vulnerability can be exploited by a remote attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-19

Related Identifiers

ALT-PU-2019-3114

AZL-44559

AZL-45306

BDU:2023-07718

CVE-2015-8985

SUSE-SU-2022:0832-1

SUSE-SU-2022:3942-1

SUSE-SU-2022:3942-2

SUSE-SU-2022_0832-1

SUSE-SU-2022_3942-1

SUSE-SU-2022_3942-2

Affected Products

Alt Linux

Gnu C Library

Suse

References · 33

• https://osv.dev/vulnerability/AZL-44559 · Vendor Advisory
• https://security.gentoo.org/glsa/201908-06 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-8985 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3942-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8985 · Security Note
• http://openwall.com/lists/oss-security/2017/02/14/9 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2022:0832-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07718 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8985 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-8985 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2015-8985 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3942-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-45306 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8985 · Vendor Advisory