Release Date: | 2015-09-14 |
The get_contents function in nss_files/files-XXX.c in the Name ServiceSwitch (NSS) in GNU C Library (aka glibc or libc6) before 2.20 might allow local users to cause a denial of service (heap corruption) or gain privileges via a long line in the NSS files database.
See more information about CVE-2015-5277 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.
Base Score: | 3.7 | Base Metrics: | AV:L/AC:H/Au:N/C:P/I:P/A:P |
Access Vector: | Local network | Attack Complexity: | High |
Authentication: | None required | Confidentiality Impact: | Partial |
Integrity Impact: | Partial | Availability Impact: | Partial |
Platform | Errata | Release Date |
Oracle Linux version 7 (glibc) | ELSA-2015-2172 | 2015-11-25 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team