cve/2016/CVE-2016-1234.md

CVE-2016-1234

Description

Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.

POC

Reference

• http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html
• http://seclists.org/fulldisclosure/2021/Sep/0

Github

• https://github.com/ARPSyndicate/cvemon