oss-security - CVE-2016-1234 in glibc glob with GLOB

Message-ID: <56DDEE49.1090904@redhat.com>
Date: Mon, 7 Mar 2016 22:10:33 +0100
From: Florian Weimer <fweimer@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE-2016-1234 in glibc glob with GLOB_ALTDIRFUNC

Alexander Cherepanov discovered that the glob implementation in glibc
does not correctly handle overlong names in struct dirent buffers when
GLOB_ALTDIRFUNC is used.

Upstream bug report:

  <https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2016-1234>

Florian

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.