Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

GNU C Library Crash Risk from Malicious Network Requests

CVE-2016-3706 · published 10 years ago
Summary

A critical issue exists in the GNU C Library, which is used by many Linux systems and applications. This issue allows hackers to crash systems by sending malicious network requests. To protect your systems, update the GNU C Library to the latest version or apply the necessary patches.

What to do
  • Update gnu glibc to version 2.23 or later.
Affected software
VendorProductAffected versions
opensuse opensuse 13.2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
gnu glibc < 2.23
cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
Original advisory text
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vec...
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
6% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published10 Jun 2016
Updated22 Oct 2026
First seen27 Jul 2026
Sources
CVE-2016-3706 · OSV
CVE-2016-3706 · NVD
Track software like this
Free during beta