| Package | Affected versions | Patched versions |
|---|---|---|
| glibc | = 2.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.1= 2.1.1= 2.1.1.6= 2.1.2= 2.1.3= 2.1.9= 2.10.1= 2.11= 2.11.1= 2.11.2= 2.11.3= 2.12.1= 2.12.2= 2.13= 2.14= 2.14.1= 2.15= 2.16≤ 2.17 |
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free