DEBIAN-CVE-2014-8121

Advisory lineage Upstream: 1 Downstream: 2
Upstream
CVE-2014-8121
Published: 27 Mar 2015, 14:59
Last modified:28 Apr 2026, 20:13

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Mar 2015, 14:59
Published
Vulnerability first disclosed
28 Apr 2026, 20:13
Last Modified
Vulnerability information updated

Description

DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.

Affected Systems

  • debian•glibc

    < 2.21-1 | < 2.21-1 | < 2.21-1 | < 2.21-1

References (1)