Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Feb 7, 2017 | Jun 1, 2016 |
| Debian | — | Upgrade glibcUpgrade eglibc | Mar 31, 2017 | May 29, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 23, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibcUpgrade glibc-staticUpgrade glibc-headersUpgrade nscdUpgrade glibc-utils | Nov 30, 2017 | Jun 1, 2016 |
| Oracle_linux | — | Upgrade glibc-commonUpgrade glibc-headersUpgrade nscdUpgrade glibcUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-static | Nov 9, 2016 | Mar 29, 2016 |
| Redhat_linux | — | Upgrade glibc-develUpgrade glibc-utilsUpgrade glibc-debuginfo-commonUpgrade glibc-debuginfoNo solution existsUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-headersUpgrade nscdUpgrade glibc | Nov 4, 2016 | Jun 1, 2016 |
| Suse | — | Upgrade glibc-locale-base-32bitUpgrade glibc-htmlUpgrade glibc-develUpgrade glibc-i18ndataUpgrade glibc-utilsUpgrade glibc-locale-x86Upgrade sles12sp1-docker-imageUpgrade glibc-profileUpgrade glibc-profile-32bitUpgrade glibc-langUpgrade glibc-infoUpgrade glibc-localeUpgrade glibc-locale-baseUpgrade glibc-devel-staticUpgrade sles12-docker-imageUpgrade glibc-extraUpgrade nscdUpgrade glibc-profile-x86Upgrade glibc-locale-32bitUpgrade glibc-x86Upgrade glibc-32bitUpgrade glibc-devel-32bitUpgrade glibc | Jun 8, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade libc6-devUpgrade libc6 | May 27, 2016 | May 26, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub