CVE-2016-3075: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 7.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.10 only
• Fedoraproject Fedora: version 23 only
• GNU Glibc: up to and including 2.23
• Opensuse Opensuse: version 13.2 only

Published 2016-06-01. Last modified 2026-06-17.