QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-8121

Back to search

CVE-2014-8121

Published: Mar 27, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.

VendorProductVersions

n/a

n/a

affected
n/a

References

SUSE-SU-2015:1424
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:0470
vendor-advisory
x_refsource_SUSE
USN-2985-2
vendor-advisory
x_refsource_UBUNTU
GLSA-201602-02
vendor-advisory
x_refsource_GENTOO
RHSA-2015:0327
vendor-advisory
x_refsource_REDHAT
73038
vdb-entry
x_refsource_BID
DSA-3480
vendor-advisory
x_refsource_DEBIAN
USN-2985-1
vendor-advisory
x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now