Stay Secure with the Latest Linux Advisories

security advisorymedium severityArch Linux

Arch Linux: ASA-201602-22 Medium: Lib32-Glibc Unbound Stack Exploit

The package lib32-glibc before version 2.23-1 is vulnerable to unbound stack usage. . Arch Linux Security Advisory ASA-201602-22 ========================================= Severity: Medium Date : 2016-02-28 CVE-ID : CVE-2014-9761 Package : lib32-glibc Type : unbound stack usage Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package lib32-glibc before version 2.23-1 is vulnerable to unbound stack usage. Resolution ========= Upgrade to 2.23-1. # pacman -Syu "lib32-glibc> =2.23-1" The problem has been fixed upstream in version 2.23. Workaround ========= None. Description ========== - CVE-2014-9761 (unbound stack usage) The nan, nanf and nanl functions no longer have unbounded stack usage depending on the length of the string passed as an argument to the functions. Impact ===== An attacker has an easy job with stack based exploits. References ========= https://access.redhat.com/security/cve/CVE-2014-9761 https://seclists.org/oss-sec/2016/q1/153 . Gentoo Linux Security Advisory GLSA-202107-25 brings attention to a low severity vulnerability in lib32-gcc affecting the integrity of the code.. Arch Linux, Lib32-glibc, Unbound Stack Usage, Security Advisory. . Severity: Medium. LinuxSecurity.com Team

Feb 28, 2016 •Medium ArchLinux