Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (8)
| Vulnerability |
Summary |
Aliases |
|
VCID-991k-es3s-hbg4
|
security update
|
CVE-2014-8121
|
|
VCID-d1zs-8tg7-byhe
|
security update
|
CVE-2015-8777
|
|
VCID-fjrd-sadn-kfcf
|
glibc: potential denial of service in internal_fnmatch()
|
CVE-2015-8984
|
|
VCID-kpcn-f4dw-97hm
|
Multiple vulnerabilities have been found in GNU C Library, the
worst of which allowing a local attacker to execute arbitrary code or cause
a Denial of Service .
|
CVE-2013-2207
|
|
VCID-nj37-pefw-rfbt
|
pt_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubuntu 12.04 LTS and before 2.19-0ubuntu6.8 on Ubuntu 14.04 LTS; and the glibc package before 2.21-0ubuntu4.2 on Ubuntu 15.10 and before 2.23-0ubuntu1 on Ubuntu 16.04 LTS and 16.10 lacks a namespace check associated with file-descriptor passing, which allows local users to capture keystrokes and spoof data, and possibly gain privileges, via pts read and write operations, related to debian/sysdeps/linux.mk. NOTE: this is not considered a vulnerability in the upstream GNU C Library because the upstream documentation has a clear security recommendation against the --enable-pt_chown option.
|
CVE-2016-2856
|
|
VCID-tp9v-vmge-nkdf
|
glibc: _IO_wstr_overflow integer overflow
|
CVE-2015-8983
|
|
VCID-ven5-emb5-a7bh
|
Multiple vulnerabilities have been found in the GNU C Library, the
worst of which allows context-dependent attackers to execute arbitrary
code.
|
CVE-2015-5277
|
|
VCID-xyvn-w5ac-yqcn
|
glibc: multiple overflows in strxfrm()
|
CVE-2015-8982
|