CVE-2014-9761

Published: 19 April 2016

Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.

From the Ubuntu security team

Joseph Myers discovered that the GNU C Library did not properly handle long arguments to functions returning a representation of Not a Number (NaN). An attacker could use this to cause a denial of service (stack exhaustion leading to an application crash) or possibly execute arbitrary code.

Notes

USN-2985-1 initially fixed this issue but it caused a regression and
the change was backed out by USN-2985-2. This issue will be fixed in a future
update.

Priority

Low

CVSS 3 base score: 9.8

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9761
• http://www.openwall.com/lists/oss-security/2016/01/20/1
• https://ubuntu.com/security/notices/USN-2985-1
• https://ubuntu.com/security/notices/USN-2985-2
• NVD
• Launchpad
• Debian

Bugs

• https://sourceware.org/bugzilla/show_bug.cgi?id=16962
• https://launchpad.net/bugs/1585614