Published: 07/10/2016 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The makecontext function in the GNU C Library (aka glibc or libc6) prior to 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent malicious users to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc
opensuse opensuse 13.2
fedoraproject fedora 25
fedoraproject fedora 24
fedoraproject fedora 23

Debian Bug report logs - #834752 glibc: CVE-2016-6323: Missing unwind information on ARM Package: src:glibc; Maintainer for src:glibc is GNU Libc Maintainers <debian-glibc@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 18 Aug 2016 16:18:01 UTC Severity: normal Tags: fixed-upstream ...

USN-3239-1 introduced a regression in the GNU C Library ...

Several security issues were fixed in the GNU C Library ...

USN-3239-1 introduced a regression in the GNU C Library ...

The makecontext function in the GNU C Library (aka glibc or libc6) before 225 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation ...

CWE-284 http://lists.opensuse.org/opensuse-updates/2016-10/msg00009.html http://www.openwall.com/lists/oss-security/2016/08/18/12 https://sourceware.org/bugzilla/show_bug.cgi?id=20435 http://www.securityfocus.com/bid/92532 http://www-01.ibm.com/support/docview.wss?uid=swg21995039 https://security.gentoo.org/glsa/201706-19 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WO7IMEYWZ2WTXGGMZBWWSDCUMFN63XOB/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTXSOVCRDGBIB4WCIDAGYYUBESXZ4IGK/https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=9e2ff6c9cc54c0b4402b8d49e4abe7000fde7617 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVWSAZVBTLALXF4SCBPDV3FY6J22DXLZ/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834752 https://nvd.nist.gov https://usn.ubuntu.com/3239-3/

CVE-2016-6323

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect