CVE-2014-9761

Critical

Published: 19/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Multiple stack-based buffer overflows in the GNU C Library (glibc) before version 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the nan, nanf, or nanl function.

Risk Assessment

Organizations may experience application crashes, leading to service availability interruptions. There is also a risk of arbitrary code execution, which could result in serious security breaches.

Recommendation

It is recommended to update the GNU C Library to version 2.23 or later to mitigate these vulnerabilities. Additionally, monitoring and restricting access to the functions may help minimize risk.

Original NVD description (English source)

Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.