CVE-2015-8984

Name of the Vulnerable Software and Affected Versions GNU C Library versions prior to 2.22

Description The issue allows context-dependent attackers to cause a denial of service, resulting in an application crash, by providing a malformed pattern that triggers an out-of-bounds read in the fnmatch function.

Recommendations For versions prior to 2.22, update to version 2.22 or later to resolve the issue. As a temporary workaround, consider restricting the input to the fnmatch function to prevent malformed patterns from being processed.