CVE-2015-8776

Critical

Published: 19/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The strftime function in the GNU C Library (glibc) before version 2.23 allows context-dependent attackers to cause application crashes or possibly obtain sensitive information via an out-of-range time value.

Risk Assessment

Attackers can exploit this vulnerability to disrupt application functionality or steal confidential data, leading to serious consequences for the organization.

Recommendation

It is recommended to update the glibc library to version 2.23 or later to mitigate this vulnerability.

Original NVD description (English source)

The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.