Buffer overflow in GNU Glibc

CVE-2013-4237

sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted (1) NTFS or (2) CIFS image.

Vulnerability class: Buffer Overflow

EPSS: 0.038 (89.0th percentile) — read the EPSS interpretation.

Affected products

  • Gnu Glibc — versions 2.0, 2.0.1, 2.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References