cve/2015/CVE-2015-8985.md

CVE-2015-8985

Description

The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.

POC

Reference

No PoCs from references.

Github

• https://github.com/flyrev/security-scan-ci-presentation
• https://github.com/mrash/afl-cve
• https://github.com/nedenwalker/spring-boot-app-using-gradle
• https://github.com/nedenwalker/spring-boot-app-with-log4j-vuln
• https://github.com/yfoelling/yair