CVE-2016-4973

Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.

Score

CVSS 3.0 7.8 High

Status

Modified - secalert@redhat.com

Published

2017-06-07

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Libssp (Gnu)

References

• http://www.openwall.com/lists/oss-security/2016/08/17/6
• http://www.securityfocus.com/bid/92530
• https://bugzilla.redhat.com/show_bug.cgi?id=1324759