CVE-2016-6264

Name of the Vulnerable Software and Affected Versions uClibc-ng versions prior to 1.0.16 uClibc versions prior to 1.0.16

Description The issue is caused by an integer signedness error in the libc/string/arm/memset.S file, which allows context-dependent attackers to cause a denial of service (crash) by providing a negative length value to the memset function.

Recommendations For uClibc-ng versions prior to 1.0.16, update to version 1.0.16 or later. For uClibc versions prior to 1.0.16, update to version 1.0.16 or later.