Fluid Attacks Database

Description

The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	glibc	>=0 <2.28-1	2.28-1
debian 11	glibc	>=0 <2.28-1	2.28-1
debian 13	glibc	>=0 <2.28-1	2.28-1
debian 14	glibc	>=0 <2.28-1	2.28-1
rpm rhel6	glibc	-	-
rpm rhel7	glibc	-	-
rpm rhel5	glibc	-	-

Aliases

1. CVE-2015-89852. NVD-2015-89853. OSV-DEBIAN-2015-89854. OSV-2015-89855. SECURITY-TRACKER-CVE-2015-8985

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.