CVE-2016-4429

MEDIUM 5.9CVE-2016-4429 · Published 10/06/2016 · updated 17/06/2026

In short

CVE-2016-4429 is a MEDIUM (CVSS 5.9) vulnerability affecting glibc (gnu).
Chance of exploitation in the next 30 days (EPSS): 4.6%, higher than 91.6% of all vulnerabilities.
Fix: update to 2.24 or later.

Package	Affected versions	Patched versions
glibc gnu	`< 2.24`	`2.24`

Description

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

References

lists.opensuse.org/opensuse-updates/2016-06/msg00030.html · Mailing List
lists.opensuse.org/opensuse-updates/2016-07/msg00039.html · Mailing List
www-01.ibm.com/support/docview.wss · Broken Link
securityfocus.com/bid/102073 · Third Party Advisory
lists.debian.org/debian-lts-announce/2020/06/msg00027.html
source.android.com/security/bulletin/2017-12-01 · Third Party Advisory
sourceware.org/bugzilla/show_bug.cgi · Issue Tracking
sourceware.org/git/gitweb.cgi
usn.ubuntu.com/3759-1 · Third Party Advisory
usn.ubuntu.com/3759-2 · Third Party Advisory
oracle.com//security-alerts/cpujul2021.html

More vulnerabilities in glibc

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

glibc

gnu

< 2.24

2.24

More vulnerabilities in glibc

See all →