CVE-2015-8778
CriticalSummary
Integer overflow in the GNU C Library (glibc or libc6) before version 2.23 allows context-dependent attackers to cause application crashes or potentially execute arbitrary code via the size argument to the __hcreate_r function, leading to out-of-bounds heap-memory access.
Risk Assessment
Organizations may experience application crashes, leading to service downtime. There is also a risk of arbitrary code execution, which could result in serious security breaches.
Recommendation
It is recommended to update the glibc library to version 2.23 or later to mitigate this vulnerability. Additionally, monitor applications using this library for unauthorized access.
Original NVD description (English source)
Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.