CVE-2015-1472

Name of the Vulnerable Software and Affected Versions GNU C Library (aka glibc or libc6) versions prior to 2.21

Description The issue allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call. This occurs due to the ADDW macro in stdio-common/vfscanf.c not properly considering data-type size during memory allocation.

Recommendations For GNU C Library (aka glibc or libc6) versions prior to 2.21, update to version 2.21 or later to resolve the issue.