Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Feb 7, 2017 | Jun 1, 2016 |
| Debian | — | Upgrade glibcUpgrade eglibc | Mar 31, 2017 | May 29, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 23, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-utilsUpgrade nscdUpgrade glibcUpgrade glibc-static | Nov 30, 2017 | Jun 1, 2016 |
| Oracle_linux | — | Upgrade glibcUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-headersUpgrade nscdUpgrade glibc-common | Nov 9, 2016 | Mar 29, 2016 |
| Redhat_linux | — | Upgrade glibc-commonUpgrade glibc-debuginfo-commonUpgrade glibc-debuginfoNo solution existsUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade glibc-headersUpgrade nscd | Nov 4, 2016 | Jun 1, 2016 |
| Suse | — | Upgrade glibc-profileUpgrade glibc-infoUpgrade glibc-extraUpgrade sles12-docker-imageUpgrade glibc-x86Upgrade glibc-locale-32bitUpgrade glibc-32bitUpgrade sles12sp1-docker-imageUpgrade glibc-profile-32bitUpgrade nscdUpgrade glibc-profile-x86Upgrade glibc-i18ndataUpgrade glibc-langUpgrade glibc-locale-x86Upgrade glibc-develUpgrade glibc-localeUpgrade glibc-utilsUpgrade glibc-devel-32bitUpgrade glibc-locale-base-32bitUpgrade glibc-devel-staticUpgrade glibc-htmlUpgrade glibc-locale-baseUpgrade glibc | Jun 8, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade libc6Upgrade libc6-dev | May 27, 2016 | May 26, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub