5
CVSSv2

CVE-2016-3706

Published: 10/06/2016 Updated: 12/02/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 446
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote malicious users to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

opensuse opensuse 13.2

gnu glibc

Vendor Advisories

USN-3239-1 introduced a regression in the GNU C Library ...
Several security issues were fixed in the GNU C Library ...
USN-3239-1 introduced a regression in the GNU C Library ...
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfoc in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458 ...

Github Repositories

Notebook Based on NextJS 7 This provides the build infrastructure and structure necessary to make any kind of React application, with or without an internal API Testing with Jest/Enzyme and Bundle Analysis comes built-in The server includes a lightweight API controller connected to the RedHat Security Data API You can easily add your own controllers and database connections

Barebones React / NodeJS boilerplate featuring SSR, hot reloading, nodemon and Webpack

NextJS-Boilerplate An unopinionated yet extensible starter fullstack boilerplate based on NextJS 7 This provides the build infrastructure and structure necessary to make any kind of React application, with or without an internal API Testing with Jest/Enzyme and Bundle Analysis comes built-in The server includes a lightweight API controller connected to the RedHat Security Da

Create by Zubair NextJS-Boilerplate An unopinionated yet extensible starter fullstack boilerplate based on NextJS 7 This provides the build infrastructure and structure necessary to make any kind of React application, with or without an internal API Testing with Jest/Enzyme and Bundle Analysis comes built-in The server includes a lightweight API controller connected to the R

Recent Articles

Google prepares 47 Android bug fixes, ten of them rated Critical
The Register • Richard Chirgwin • 05 Dec 2017

Nexus and Pixel owners get their fixes on US Tuesday. The rest of us peasants have to wait

Google has teased 47 Android patches for Nexus and Pixel devices. Among the critical bugs in the Android Security Bulletin, five concern the media framework, one is system-level, four hit Qualcomm components. The worst, Google said, is one of the media framework bugs, not yet fully disclosed, but it “could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process”. Two of the media framework bugs only affect Android 6.0 (31 p...