DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in...
Vulnerability Description
DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8121
Credits & Attribution
No credits recorded in the NVD database.
References
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1165192
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
- http://www.ubuntu.com/usn/USN-2985-2
- https://security.gentoo.org/glsa/201602-02
- https://sourceware.org/ml/libc-alpha/2015-02/msg00617.html
- http://rhn.redhat.com/errata/RHSA-2015-0327.html
- http://www.securityfocus.com/bid/73038
- http://www.debian.org/security/2016/dsa-3480
- http://www.ubuntu.com/usn/USN-2985-1
More from suse
View All →Affected Vendor
suse
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.