CVE-2017-7476

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	Gnulib before 2017-04-26	Gnulib before 2017-04-26

References

http://git.savannah.gnu.org/gitweb/?p=gnulib.git%3Ba=commit%3Bh=94e01571507835ff59dd8ce2a0b56a4b566965a4
http://www.securityfocus.com/bid/98098Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1444774Exploit, Issue Tracking, Mitigation, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1445185Issue Tracking, Patch, Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2017-7476Third Party Advisory
http://git.savannah.gnu.org/gitweb/?p=gnulib.git%3Ba=commit%3Bh=94e01571507835ff59dd8ce2a0b56a4b566965a4
http://www.securityfocus.com/bid/98098Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1444774Exploit, Issue Tracking, Mitigation, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1445185Issue Tracking, Patch, Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2017-7476Third Party Advisory

Timeline

Published: May 2, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-74777.0Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a deni CVE-2017-74787.5OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that t CVE-2017-74796.5OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denia CVE-2017-74809.8rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remot CVE-2017-74819.8Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results CVE-2017-74827.8In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This CVE-2017-74837.5Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-inv CVE-2017-74847.5It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before CVE-2017-74855.9In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL envir CVE-2017-74867.5PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any us CVE-2017-74877.8The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to ca CVE-2017-74884.3Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the le