This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-6323 →

DEBIAN-CVE-2016-6323

The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (...

Original description

The description as published by the source.

The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24-1"}]}]

Debian:13 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24-1"}]}]

Debian:14 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24-1"}]}]

References

advisory security-tracker.debian.org