# MA-574.022016: MyCERT Advisory - GNU glibc Vulnerability

**Date:** 18 Feb 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-574.022016  
**Advisory ID:** MA-574.022016

---

####
**1.0 Introduction**
The GNU C Library is used as the C library in the GNU system and in GNU/Linux systems, as well as many other systems that use Linux as the kernel.
MyCERT is aware of a stack-based buffer overflow vulnerability in the getaddrinfo function in glibc. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code and take control of an affected system.
**2.0 Impact**
The getaddrinfo() function allows a buffer overflow condition in which arbitrary code may be executed. The impact may vary depending on if the use case is local or remote.
**3.0 Affected Products**
Some embedded operating systems or older, no longer supported versions of linux distributions may contain an older version of glibc that is vulnerable. According to glibc developers, the vulnerable code was initially added in May 2008 as part of the development for glibc 2.9. All versions from 2.9 (originally released November 2008) to 2.22 appear to be affected.
**4.0 Recommendation**
MyCERT highly recommended users of these applications to apply the patch for affected product. Affected users should apply the patch as soon as possible. The patch will also be included as part of the upcoming glibc 2.23 release. The patch is available at this URL:
Patch: <https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#f4978d969186cdcdcdb4978d96918687919781869d808dda998d) or [[email protected]](/cdn-cgi/l/email-protection#0964706a6c7b7d4964706a6c7b7d27667b6e276470) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Handphone: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- <https://www.us-cert.gov/ncas/current-activity/2016/02/17/GNU-glibc-Vulnerability>
- <http://www.kb.cert.org/vuls/id/457759>
- <https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html>
- <https://isc.sans.edu/forums/diary/CVE20157547+Critical+Vulnerability+in+glibc+getaddrinfo/20737/>
- <https://www.gnu.org/software/libc/>