UBUNTU-CVE-2016-4973

Source
https://ubuntu.com/security/CVE-2016-4973
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2016-4973
Upstream
Published
2017-06-07T20:29:00Z
Modified
2025-07-14T07:14:45.507604Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • Ubuntu - low
Summary
[none]
Details

Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.

References

Affected packages

Ubuntu:Pro:14.04:LTS / mingw-w64

Package

Name
mingw-w64
Purl
pkg:deb/ubuntu/mingw-w64@3.1.0-1?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.0~svn5915-1
3.0.0-3
3.1.0-1

Ubuntu:Pro:16.04:LTS / mingw-w64

Package

Name
mingw-w64
Purl
pkg:deb/ubuntu/mingw-w64@4.0.4-2?arch=source&distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.2-4
4.0.4-1
4.0.4-2

Ubuntu:Pro:18.04:LTS / mingw-w64

Package

Name
mingw-w64
Purl
pkg:deb/ubuntu/mingw-w64@5.0.3-1?arch=source&distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.2-2
5.0.3-1

Ubuntu:Pro:20.04:LTS / mingw-w64

Package

Name
mingw-w64
Purl
pkg:deb/ubuntu/mingw-w64@7.0.0-2?arch=source&distro=esm-apps/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.0.0-3
6.0.0-4

7.*

7.0.0-2

Ubuntu:22.04:LTS / mingw-w64

Package

Name
mingw-w64
Purl
pkg:deb/ubuntu/mingw-w64@8.0.0-1?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

8.*

8.0.0-1

Ubuntu:24.04:LTS / mingw-w64

Package

Name
mingw-w64
Purl
pkg:deb/ubuntu/mingw-w64@11.0.1-3build1?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

11.*

11.0.1-2
11.0.1-3
11.0.1-3build1

Ubuntu:25.04 / mingw-w64

Package

Name
mingw-w64
Purl
pkg:deb/ubuntu/mingw-w64@12.0.0-3?arch=source&distro=plucky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

12.*

12.0.0-3