CVE-2016-1234: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.

Affected products

• Fedoraproject Fedora: version 23 only
• GNU Glibc: before 2.24 (fixed in 2.24)
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.2 only

Published 2016-06-01. Last modified 2026-06-17.