USN-3239-2

Vulnerability from osv_ubuntu – Published: 2017-03-21 23:34 – Updated: 2026-04-22 07:36 – Source website
VLAI
Summary
eglibc, glibc regression
Details

USN-3239-1 fixed vulnerabilities in the GNU C Library. Unfortunately, the fix for CVE-2015-5180 introduced an internal ABI change within the resolver library. This update reverts the change. We apologize for the inconvenience.

Please note that long-running services that were restarted to compensate for the USN-3239-1 update may need to be restarted again.

Original advisory details:

It was discovered that the GNU C Library incorrectly handled the strxfrm() function. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8982)

It was discovered that an integer overflow existed in the _IO_wstr_overflow() function of the GNU C Library. An attacker could use this to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8983)

It was discovered that the fnmatch() function in the GNU C Library did not properly handle certain malformed patterns. An attacker could use this to cause a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8984)

Alexander Cherepanov discovered a stack-based buffer overflow in the glob implementation of the GNU C Library. An attacker could use this to specially craft a directory layout and cause a denial of service. (CVE-2016-1234)

Florian Weimer discovered a NULL pointer dereference in the DNS resolver of the GNU C Library. An attacker could use this to cause a denial of service. (CVE-2015-5180)

Michael Petlan discovered an unbounded stack allocation in the getaddrinfo() function of the GNU C Library. An attacker could use this to cause a denial of service. (CVE-2016-3706)

Aldy Hernandez discovered an unbounded stack allocation in the sunrpc implementation in the GNU C Library. An attacker could use this to cause a denial of service. (CVE-2016-4429)

Tim Ruehsen discovered that the getaddrinfo() implementation in the GNU C Library did not properly track memory allocations. An attacker could use this to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-5417)

Andreas Schwab discovered that the GNU C Library on ARM 32-bit platforms did not properly set up execution contexts. An attacker could use this to cause a denial of service. (CVE-2016-6323)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "eglibc-source",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc-bin",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc-dev-bin",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-amd64",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-armel",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-dev-amd64",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-dev-armel",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-dev-i386",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-dev-ppc64",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-dev-x32",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-i386",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-pic",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-ppc64",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-prof",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "libc6-x32",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "multiarch-support",
            "binary_version": "2.19-0ubuntu6.11"
          },
          {
            "binary_name": "nscd",
            "binary_version": "2.19-0ubuntu6.11"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "eglibc",
        "purl": "pkg:deb/ubuntu/eglibc@2.19-0ubuntu6.11?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.19-0ubuntu6.11"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.17-93ubuntu4",
        "2.18-0ubuntu1",
        "2.18-0ubuntu2",
        "2.18-0ubuntu4",
        "2.18-0ubuntu5",
        "2.18-0ubuntu6",
        "2.18-0ubuntu7",
        "2.19-0ubuntu2",
        "2.19-0ubuntu3",
        "2.19-0ubuntu4",
        "2.19-0ubuntu5",
        "2.19-0ubuntu6",
        "2.19-0ubuntu6.1",
        "2.19-0ubuntu6.3",
        "2.19-0ubuntu6.4",
        "2.19-0ubuntu6.5",
        "2.19-0ubuntu6.6",
        "2.19-0ubuntu6.7",
        "2.19-0ubuntu6.8",
        "2.19-0ubuntu6.9",
        "2.19-0ubuntu6.10"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "glibc-source",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc-bin",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc-dev-bin",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-amd64",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-armel",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-dev-amd64",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-dev-armel",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-dev-i386",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-dev-ppc64",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-dev-s390",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-dev-x32",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-i386",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-pic",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-ppc64",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-s390",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "libc6-x32",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "locales",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "locales-all",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "multiarch-support",
            "binary_version": "2.23-0ubuntu7"
          },
          {
            "binary_name": "nscd",
            "binary_version": "2.23-0ubuntu7"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "glibc",
        "purl": "pkg:deb/ubuntu/glibc@2.23-0ubuntu7?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.23-0ubuntu7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.21-0ubuntu4",
        "2.21-0ubuntu5",
        "2.21-0ubuntu6",
        "2.23-0ubuntu1",
        "2.23-0ubuntu2",
        "2.23-0ubuntu3",
        "2.23-0ubuntu4",
        "2.23-0ubuntu5",
        "2.23-0ubuntu6"
      ]
    }
  ],
  "aliases": [],
  "details": "USN-3239-1 fixed vulnerabilities in the GNU C Library. Unfortunately,\nthe fix for CVE-2015-5180 introduced an internal ABI change within\nthe resolver library. This update reverts the change. We apologize\nfor the inconvenience.\n\nPlease note that long-running services that were restarted to compensate\nfor the USN-3239-1 update may need to be restarted again.\n\nOriginal advisory details:\n\n It was discovered that the GNU C Library incorrectly handled the\n strxfrm() function. An attacker could use this issue to cause a denial\n of service or possibly execute arbitrary code. This issue only affected\n Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8982)\n \n It was discovered that an integer overflow existed in the\n _IO_wstr_overflow() function of the GNU C Library. An attacker could\n use this to cause a denial of service or possibly execute arbitrary\n code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04\n LTS. (CVE-2015-8983)\n \n It was discovered that the fnmatch() function in the GNU C Library\n did not properly handle certain malformed patterns. An attacker could\n use this to cause a denial of service. This issue only affected Ubuntu\n 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8984)\n \n Alexander Cherepanov discovered a stack-based buffer overflow in the\n glob implementation of the GNU C Library. An attacker could use this\n to specially craft a directory layout and cause a denial of service.\n (CVE-2016-1234)\n \n Florian Weimer discovered a NULL pointer dereference in the DNS\n resolver of the GNU C Library. An attacker could use this to cause\n a denial of service. (CVE-2015-5180)\n \n Michael Petlan discovered an unbounded stack allocation in the\n getaddrinfo() function of the GNU C Library. An attacker could use\n this to cause a denial of service. (CVE-2016-3706)\n \n Aldy Hernandez discovered an unbounded stack allocation in the sunrpc\n implementation in the GNU C Library. An attacker could use this to\n cause a denial of service. (CVE-2016-4429)\n \n Tim Ruehsen discovered that the getaddrinfo() implementation in the\n GNU C Library did not properly track memory allocations. An attacker\n could use this to cause a denial of service. This issue only affected\n Ubuntu 16.04 LTS. (CVE-2016-5417)\n \n Andreas Schwab discovered that the GNU C Library on ARM 32-bit\n platforms did not properly set up execution contexts. An attacker\n could use this to cause a denial of service. (CVE-2016-6323)\n",
  "id": "USN-3239-2",
  "modified": "2026-04-22T07:36:34Z",
  "published": "2017-03-21T23:34:40Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3239-2"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.launchpad.net/bugs/1674532"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "eglibc, glibc regression",
  "upstream": []
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.