Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function.
References
| Link | Resource |
|---|---|
| http://mailman.uclibc-ng.org/pipermail/devel/2016-July/001067.html | Release Notes Vendor Advisory |
| http://mailman.uclibc-ng.org/pipermail/devel/2016-May/000890.html | Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2016/06/29/3 | Mailing List Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/07/21/2 | Mailing List Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/07/21/6 | Mailing List Patch Third Party Advisory |
| http://www.securityfocus.com/bid/91492 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
19 May 2021, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:uclibc:uclibc:-:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-Other | |
| References | (MLIST) http://www.openwall.com/lists/oss-security/2016/06/29/3 - Mailing List, Patch, Third Party Advisory | |
| References | (MLIST) http://www.openwall.com/lists/oss-security/2016/07/21/2 - Mailing List, Patch, Third Party Advisory | |
| References | (MLIST) http://www.openwall.com/lists/oss-security/2016/07/21/6 - Mailing List, Patch, Third Party Advisory |
Information
Published : 2017-01-27 22:59
Updated : 2024-02-04 19:11
NVD link : CVE-2016-6264
Mitre link : CVE-2016-6264
CVE.ORG link : CVE-2016-6264
JSON object : View
Products Affected
uclibc
- uclibc
uclibc-ng_project
- uclibc-ng
CWE