CVE-2016-4429 PUBLISHED

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

EPSS 2.00% · 83.5th percentile

Risk Scores

EPSS Score
2.00%
83.5th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlibtirpc0, 0.2.2-5ubuntu1, 0.2.2-5ubuntu2
Ubuntu:16.04:LTSglibc0, 2.21-0ubuntu4, 2.21-0ubuntu5
Ubuntu:14.04:LTSeglibc2.19-0ubuntu6, 2.19-0ubuntu6.1, 2.19-0ubuntu6.3
Ubuntu:16.04:LTSlibtirpc0, 0.2.5-1

Timeline

References

Open in Interactive Console →