CVE-2016-6323: fedoraproject fedora Improper Access Control
Vulnerability summary
CVE-2016-6323 is a high (CVSS 7.5) Improper Access Control vulnerability in fedoraproject fedora. EPSS estimates a 3.87% chance of exploitation in the next 30 days, higher than 90.1% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 07-10-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
3.87%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
+0.03 pp
From 3.84% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu2 products
- eglibc< 2.19-0ubuntu6.10
- glibc< 2.23-0ubuntu6
Debian1 product
- glibc< 2.24-1
Fedoraproject1 product
- fedoraEOL23 | 24 | 25
Gnu1 product
- glibc≤ 2.24
Opensuse1 product
- opensuseEOL13.2
5 vendors · 6 products
References
14 links- www-01.ibm.com/support/docview.wss?uid=swg21995039X Refsource CONFIRM
- www.openwall.com/lists/oss-security/2016/08/18/12Mailing ListX Refsource MLISTThird Party AdvisoryREPORT
- lists.opensuse.org/opensuse-updates/2016-10/msg00009.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
