DEBIAN-CVE-2015-1472

Advisory lineage Upstream: 1 Downstream: 2
Upstream
CVE-2015-1472
Published: 08 Apr 2015, 10:59
Last modified:28 Apr 2026, 20:14

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 Apr 2015, 10:59
Published
Vulnerability first disclosed
28 Apr 2026, 20:14
Last Modified
Vulnerability information updated

Description

The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.

Affected Systems

  • debian•glibc

    < 2.19-15 | < 2.19-15 | < 2.19-15 | < 2.19-15

References (1)