CVE-2016-6323 — Improper Access Control in Glibc

CWE-284 — Improper Access Control10 documents8 sources
Severity
7.5HIGHNVD
EPSS
1.1%
top 21.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
GNU GlibcFedoraproject FedoraOpensuse
Timeline
PublishedOct 7
Latest updateMay 14

Description

The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶Debiangnu/glibc< 2.24-1+3
▶NVDgnu/glibc2.24

Also affects: Fedora 23, 24, 25

🔴Vulnerability Details

3
GHSA
GHSA-xrcf-wxwq-5jmq: The makecontext function in the GNU C Library (aka glibc or libc6) before 2↗2022-05-14
▶
CVEList
CVE-2016-6323: The makecontext function in the GNU C Library (aka glibc or libc6) before 2↗2016-10-07
▶
OSV
CVE-2016-6323: The makecontext function in the GNU C Library (aka glibc or libc6) before 2↗2016-10-07
▶

📋Vendor Advisories

3
Ubuntu
GNU C Library vulnerabilities↗2017-03-21
▶
Red Hat
glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace↗2016-08-04
▶
Debian
CVE-2016-6323: glibc - The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 c...↗2016
▶

💬Community

3
Bugzilla
CVE-2016-6323 glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace [fedora-all]↗2016-10-10
▶
Bugzilla
CVE-2016-6323 glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace↗2016-10-10
▶
Bugzilla
CVE-2016-6323 glibc-arm-linux-gnu: glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace [fedora-all]↗2016-10-10
▶
CVE-2016-6323 — Improper Access Control in GNU Glibc | cvebase