CVE-2016-1234

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.24

Description The issue is related to a stack-based buffer overflow in the glob implementation of the GNU C Library. This occurs when GLOB ALTDIRFUNC is used, allowing context-dependent attackers to cause a denial of service, resulting in a crash via a long name.

Recommendations For versions prior to 2.24, update to version 2.24 or later to resolve the issue. As a temporary workaround, consider avoiding the use of long names when GLOB ALTDIRFUNC is enabled until a patch is applied.