CVE-2015-8985 — Reachable Assertion in Glibc

CWE-198 documents7 sources
Severity
5.9MEDIUMNVD
EPSS
0.2%
top 58.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Glibc
Timeline
PublishedMar 20
Latest updateMay 13

Description

The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶NVDgnu/glibc< 2.28
▶Debiangnu/glibc< 2.28-1+3

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-chf9-h36m-6388: The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failu↗2022-05-13
▶
OSV
CVE-2015-8985: The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failu↗2017-03-20
▶
CVEList
CVE-2015-8985: The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failu↗2017-03-20
▶

📋Vendor Advisories

2
Red Hat
glibc: potential denial of service in pop_fail_stack()↗2015-02-28
▶
Debian
CVE-2015-8985: glibc - The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows con...↗2015
▶

💬Community

2
Bugzilla
CVE-2015-8985 glibc: potential denial of service in pop_fail_stack()↗2015-03-02
▶
Bugzilla
CVE-2015-8985 glibc: potential denial of service in pop_fail_stack() [fedora-all]↗2015-03-02
▶
CVE-2015-8985 — Reachable Assertion in GNU Glibc | cvebase