CVE-2016-6264

ALTO 7.5CVE-2016-6264 · Published 27/01/2017 · updated 17/06/2026

In breve

CVE-2016-6264 è una vulnerabilità ALTO (CVSS 7.5) che riguarda uclibc-ng (uclibc-ng project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.7%, superiore al 85.7% delle vulnerabilità.
Correzione: aggiornare a 1.0.16 o successiva.

Package	Affected versions	Patched versions
uclibc-ng uclibc-ng_project	`< 1.0.16`	`1.0.16`

Description

Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function.

References

mailman.uclibc-ng.org/pipermail/devel/2016-July/001067.html · Release Notes
mailman.uclibc-ng.org/pipermail/devel/2016-May/000890.html · Vendor Advisory
openwall.com/lists/oss-security/2016/06/29/3 · Mailing List
openwall.com/lists/oss-security/2016/07/21/2 · Mailing List
openwall.com/lists/oss-security/2016/07/21/6 · Mailing List
securityfocus.com/bid/91492 · Third Party Advisory

Altre vulnerabilità di uclibc-ng

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

uclibc-ng

uclibc-ng_project

< 1.0.16

1.0.16

Altre vulnerabilità di uclibc-ng

Vedi tutto →