Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Feb 7, 2017 | Jun 1, 2016 |
| Debian | — | Upgrade glibcUpgrade eglibc | Mar 31, 2017 | May 29, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 23, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-commonUpgrade glibc-develUpgrade glibc-utilsUpgrade nscdUpgrade glibc-headersUpgrade glibc-staticUpgrade glibc | Nov 30, 2017 | Jun 1, 2016 |
| Oracle_linux | — | Upgrade glibc-develUpgrade glibc-staticUpgrade glibcUpgrade glibc-utilsUpgrade glibc-commonUpgrade nscdUpgrade glibc-headers | Nov 9, 2016 | Mar 29, 2016 |
| Redhat_linux | — | Upgrade glibc-headersUpgrade glibcUpgrade nscdUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-debuginfo-commonUpgrade glibc-debuginfoUpgrade glibc-staticNo solution existsUpgrade glibc-common | Nov 4, 2016 | Jun 1, 2016 |
| Suse | — | Upgrade glibc-infoUpgrade glibc-extraUpgrade glibc-profile-x86Upgrade nscdUpgrade glibc-32bitUpgrade glibc-locale-32bitUpgrade glibc-profileUpgrade glibc-x86Upgrade sles12-docker-imageUpgrade glibc-profile-32bitUpgrade sles12sp1-docker-imageUpgrade glibc-locale-baseUpgrade glibc-localeUpgrade glibc-locale-x86Upgrade glibc-develUpgrade glibc-langUpgrade glibc-devel-32bitUpgrade glibc-devel-staticUpgrade glibc-htmlUpgrade glibcUpgrade glibc-i18ndataUpgrade glibc-locale-base-32bitUpgrade glibc-utils | Jun 8, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade libc6Upgrade libc6-dev | May 27, 2016 | May 26, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub