CVE-2015-8779

Desbordamiento de buffer basado en pila en la función catopen en la GNU C Library (también conocida como glibc o libc6) en versiones anteriores a 2.23 permite a atacantes dependientes de contexto causar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario a través de un nombre de catálogo largo.

A stack based buffer overflow vulnerability was found in the catopen() function. An excessively long string passed to the function could cause it to crash or, potentially, execute arbitrary code.

An update that solves 6 vulnerabilities and has three fixes is now available. This update for glibc fixes the following security issues. A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses. Insufficient checking of LD_POINTER_GUARD environment variable allowed local attackers to bypass the pointer guarding protection of the dynamic loader on set-user-ID and set-group-ID programs Out-of-range time values passed to the strftime function may cause it to crash, leading to a denial of service, or potentially disclosure information Integer overflow in hcreate and hcreate_r could have caused an out-of-bound memory access. Leading to application crashes or, potentially, arbitrary code execution A stack overflow could have caused applications which process long strings with the nan function to crash or, potentially, execute arbitrary code. A stack overflow in the catopen function could have caused applications which pass long strings to the catopen function to crash or, potentially execute arbitrary code. The following non-security bugs were fixed.