CVE catalog

CVE-2015-8985

glibc: CVE-2015-8985

[CVE catalog]

Severity
Medium · CVSS 5.1CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.87% · Oct 25, 2026

The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglibcsid2.43-7fixed
Debianglibcforky2.43-7fixed
Debianglibctrixie2.41-12+deb13u4fixed
Debianglibcbookworm2.36-9+deb12u14fixed
Debianglibcbookworm-security2.36-9+deb12u7fixed
Ubuntueglibcpro2.17-93ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu1vulnerable
Ubuntueglibcpro2.18-0ubuntu2vulnerable
Ubuntueglibcpro2.18-0ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu5vulnerable
Ubuntueglibcpro2.18-0ubuntu6vulnerable
Ubuntueglibcpro2.18-0ubuntu7vulnerable
Ubuntueglibcpro2.19-0ubuntu2vulnerable
Ubuntueglibcpro2.19-0ubuntu3vulnerable
Ubuntueglibcpro2.19-0ubuntu4vulnerable
Ubuntueglibcpro2.19-0ubuntu5vulnerable
Ubuntueglibcpro2.19-0ubuntu6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.4vulnerable
Ubuntueglibcpro2.19-0ubuntu6.5vulnerable
Ubuntueglibcpro2.19-0ubuntu6.6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.7vulnerable
Ubuntueglibcpro2.19-0ubuntu6.8vulnerable
Ubuntueglibcpro2.19-0ubuntu6.9vulnerable
Ubuntueglibcpro2.19-0ubuntu6.10vulnerable
Ubuntueglibcpro2.19-0ubuntu6.11vulnerable
Ubuntueglibcpro2.19-0ubuntu6.13vulnerable
Ubuntueglibcpro2.19-0ubuntu6.14vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm2vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm4vulnerable
Ubuntuglibcpro2.26-0ubuntu2vulnerable
Ubuntuglibcpro2.26-0ubuntu2.1vulnerable
Ubuntuglibcpro2.27-0ubuntu2vulnerable
Ubuntuglibcpro2.27-0ubuntu3vulnerable
Ubuntuglibcpro2.27-3ubuntu1vulnerable
Ubuntuglibcpro2.27-3ubuntu1.2vulnerable
Ubuntuglibcpro2.27-3ubuntu1.3vulnerable
Ubuntuglibcpro2.27-3ubuntu1.4vulnerable
Ubuntuglibcpro2.27-3ubuntu1.5vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6+esm1vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6+esm2vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6+esm3vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6+esm4vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6+esm5vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6+esm6vulnerable
Suseglibclinux enterprise software development kit 12 sp52.22-114.22.1fixed
Suseglibclinux enterprise server 12 sp52.22-114.22.1fixed
Suseglibclinux enterprise server for sap applications 12 sp52.22-114.22.1fixed
Suseglibclinux enterprise high performance computing 15-espos2.26-13.65.1fixed
Suseglibclinux enterprise high performance computing 15-ltss2.26-13.65.1fixed
Suseglibclinux enterprise high performance computing 15 sp1-espos2.26-13.65.1fixed
Suseglibclinux enterprise high performance computing 15 sp1-ltss2.26-13.65.1fixed
Suseglibclinux enterprise high performance computing 15 sp2-espos2.26-13.65.1fixed
Suseglibclinux enterprise high performance computing 15 sp2-ltss2.26-13.65.1fixed
Suseglibclinux enterprise real time 15 sp22.26-13.65.1fixed
Suseglibclinux enterprise server 15-ltss2.26-13.65.1fixed
Suseglibclinux enterprise server 15 sp1-bcl2.26-13.65.1fixed
Suseglibclinux enterprise server 15 sp1-ltss2.26-13.65.1fixed
Suseglibclinux enterprise server 15 sp2-bcl2.26-13.65.1fixed
Suseglibclinux enterprise server 15 sp2-ltss2.26-13.65.1fixed
Suseglibclinux enterprise server for sap applications 152.26-13.65.1fixed
Suseglibclinux enterprise server for sap applications 15 sp12.26-13.65.1fixed
Suseglibclinux enterprise server for sap applications 15 sp22.26-13.65.1fixed
Suseglibcmanager proxy 4.12.26-13.65.1fixed
Suseglibcmanager retail branch server 4.12.26-13.65.1fixed
Suseglibcmanager server 4.12.26-13.65.1fixed
Suseglibclinux enterprise micro 5.02.26-13.65.1fixed
Suseglibcenterprise storage 62.26-13.65.1fixed
Suseglibcenterprise storage 72.26-13.65.1fixed
Suseglibcopenstack cloud 92.22-114.22.1fixed
Suseglibcopenstack cloud crowbar 92.22-114.22.1fixed
Suseglibclinux enterprise server for sap applications 12 sp42.22-114.22.1fixed
Suseglibclinux enterprise server 12 sp4-ltss2.22-114.22.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglibcsourcesid2.28-1unimportantNot reported[779392]
Debianglibcsourceforky2.28-1unimportantNot reported[779392]
Debianglibcsourcetrixie2.28-1unimportantNot reported[779392]
Debianglibcsourcebookworm2.28-1unimportantNot reported[779392]
Suseglibcrpmlinux enterprise software development kit 12 sp52.22-114.22.1Not reportedSUSE-SU-2022:3942-1Not reported
Suseglibcrpmlinux enterprise server 12 sp52.22-114.22.1Not reportedSUSE-SU-2022:3942-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 12 sp52.22-114.22.1Not reportedSUSE-SU-2022:3942-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15-espos2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15-ltss2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15 sp1-espos2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15 sp1-ltss2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15 sp2-espos2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15 sp2-ltss2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise real time 15 sp22.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise server 15-ltss2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise server 15 sp1-bcl2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise server 15 sp1-ltss2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise server 15 sp2-bcl2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise server 15 sp2-ltss2.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 152.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 15 sp12.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 15 sp22.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmmanager proxy 4.12.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmmanager retail branch server 4.12.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmmanager server 4.12.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmlinux enterprise micro 5.02.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmenterprise storage 62.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmenterprise storage 72.26-13.65.1Not reportedSUSE-SU-2022:0832-1Not reported
Suseglibcrpmopenstack cloud 92.22-114.22.1Not reportedSUSE-SU-2022:3942-2Not reported
Suseglibcrpmopenstack cloud crowbar 92.22-114.22.1Not reportedSUSE-SU-2022:3942-2Not reported
Suseglibcrpmlinux enterprise server for sap applications 12 sp42.22-114.22.1Not reportedSUSE-SU-2022:3942-2Not reported
Suseglibcrpmlinux enterprise server 12 sp4-ltss2.22-114.22.1Not reportedSUSE-SU-2022:3942-2Not reported

[Debian bug #779392]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [glibc-doc]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6-dbg]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6-dev]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6-i386]Fixed

    Source package: [glibc]

    Details (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6-x32]Fixed

    Source package: [glibc]

    Details (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc-bin]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc-l10n]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [locales]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [nscd]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

[Debian 13 (Trixie)]

  • [glibc-doc]Fixed

    Source package: [glibc]

    Details (2)
    • 2.41-12+deb13u3 · all · trixie

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · 13

    • 2.41-12+deb13u3 · all · trixie

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · 13

  • Source package: [glibc]

    Details (2)
    • 2.41-12+deb13u3 · all · trixie

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · 13

    • 2.41-12+deb13u3 · all · trixie

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · 13

  • [libc6]Fixed

    Source package: [glibc]

    Details (2)
    • 2.41-12+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · 13

    • 2.41-12+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · 13

  • [libc6-dbg]Fixed

    Source package: [glibc]

    Details (2)
    • 2.41-12+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · 13

    • 2.41-12+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.28-1

      dsa · glibc · debian · 13

Next results

Observed:

References