CVE-2015-1473

Name of the Vulnerable Software and Affected Versions GNU C Library versions prior to 2.21

Description The issue is related to the ADDW macro in stdio-common/vfscanf.c, which does not properly consider data-type size during a risk-management decision for use of the alloca function. This might allow attackers to cause a denial of service or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.

Recommendations For GNU C Library versions prior to 2.21, update to version 2.21 or later to resolve the issue.