CVE-2016-4973 Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Siz...
HighCVSS 7.8
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/mingw-w64(Ubuntu:22.04) | All versions | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | All versions | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 25.2 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 25.3 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 26 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 26.1 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 26.3 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 26.4 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 26.5 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 26.6 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 26.7 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 26.8 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27~exp1 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27~exp2 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27~exp3 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27~exp4 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27~exp5 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27~exp6 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27~exp7 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27~exp8 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 27~exp9 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 28 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 28.1 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 28.1+bootstrap | No fix listed |
Show 32 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gcc-mingw-w64(Debian:12) | = 28.1+exp1 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 28.2 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 28.3 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 29 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 29~exp1 | No fix listed |
| debian/gcc-mingw-w64(Debian:12) | = 29~exp2 | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | All versions | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 27 | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 28 | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 28.1 | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 28.1+bootstrap | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 28.1+exp1 | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 28.2 | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 28.3 | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 29 | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 29~exp1 | No fix listed |
| debian/gcc-mingw-w64(Debian:13) | = 29~exp2 | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | All versions | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 27 | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 28 | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 28.1 | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 28.1+bootstrap | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 28.1+exp1 | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 28.2 | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 28.3 | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 29 | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 29~exp1 | No fix listed |
| debian/gcc-mingw-w64(Debian:14) | = 29~exp2 | No fix listed |
| GNU libssp | All versions | No fix listed |
| ubuntu/mingw-w64(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/mingw-w64(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/mingw-w64(Ubuntu:26.10) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2016-4973 vendor-advisory
- [oss-security] 20160817 CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality mailing-list third-party-advisory
- 92530 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- bugs.debian.org issue-tracking