9.1

CVE-2015-8776

The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Suse ≫ Linux Enterprise Debuginfo Version11 Updatesp2
Suse ≫ Linux Enterprise Debuginfo Version11 Updatesp3
Suse ≫ Linux Enterprise Debuginfo Version11 Updatesp4
Opensuse ≫ Opensuse Version13.2
Suse ≫ Linux Enterprise Desktop Version11 Updatesp3
Suse ≫ Linux Enterprise Desktop Version11 Updatesp4
Suse ≫ Linux Enterprise Desktop Version12 Updatesp1
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwEditionltss
Suse ≫ Linux Enterprise Server Version11 Updatesp3
Suse ≫ Linux Enterprise Server Version11 Updatesp3 SwPlatformvmware
Suse ≫ Linux Enterprise Server Version11 Updatesp4
Suse ≫ Linux Enterprise Server Version12 Updatesp1
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version15.10
Debian ≫ Debian Linux Version8.0
Fedoraproject ≫ Fedora Version23
Gnu ≫ Glibc Version <= 2.22
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.61% 0.905
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
Third Party Advisory
http://www.ubuntu.com/usn/USN-2985-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2985-2
Third Party Advisory
https://security.gentoo.org/glsa/201602-02
Third Party Advisory
http://www.debian.org/security/2016/dsa-3480
https://security.gentoo.org/glsa/201702-11
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/01/20/1
Issue Tracking
https://access.redhat.com/errata/RHSA-2017:1916
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html
Third Party Advisory
http://www.debian.org/security/2016/dsa-3481
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0680.html
http://www.openwall.com/lists/oss-security/2016/01/19/11
Third Party Advisory
https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html
Vendor Advisory
http://www.securityfocus.com/bid/83277
https://sourceware.org/bugzilla/show_bug.cgi?id=18985
Issue Tracking