ZeroHour

CVE-2016-6323

CVSS 3.0
7.5 high
EPSS
4%p89
Published
()
Modified
Description

The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.

Vendors
gnuopensusefedoraproject
Products
glibc, opensuse, fedora
Weakness
CWE-284
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.