CVE-2015-8779

Critical

Published: 19/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the catopen function in the GNU C Library (glibc) before version 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.

Risk Assessment

This vulnerability can lead to service outages and allow attackers to execute unauthorized code, posing a serious security threat to the system.

Recommendation

It is recommended to update the glibc library to version 2.23 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.