Synopsis: Low: glibc security, bug fix, and enhancement update
Advisory ID: SLSA-2016:2573-2
Issue Date: 2016-11-03
CVE Numbers: CVE-2016-3075
* A stack overflow vulnerability was found in _nss_dns_getnetbyname_r. On
systems with nsswitch configured to include “networks: dns” with a
privileged or network-facing service that would attempt to resolve user-
provided network names, an attacker could provide an excessively long
network name, resulting in stack corruption and code execution.
This issue was discovered by Florian Weimer (Red Hat).
– Scientific Linux Development Team