CVE-2016-4973
Binaries compiled against targets that use the libssp library in GCC for stack smashing...
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
- Record
CVE-2016-4973- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
- Record
CVE-2016-4973- Updated
- 2026-11-02
EUVDEUVD-2016-5945 No score
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
- Record
EUVD-2016-5945- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fxx4-jm8v-4948
Binaries compiled against targets that use the libssp library in GCC for stack smashing...
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
- Record
GHSA-fxx4-jm8v-4948- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
- Record
CVE-2016-4973- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-4973
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
- Record
DEBIAN-CVE-2016-4973- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-4973
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
- Record
UBUNTU-CVE-2016-4973- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gcc-mingw-w64Debian:12 |
All versions, plus listed versions 25.225.32626.126.3 Show 24 moreShow less26.426.526.626.726.82727~exp127~exp227~exp327~exp427~exp527~exp627~exp727~exp827~exp92828.128.1+bootstrap28.1+exp128.228.32929~exp129~exp2 |
None known |
gcc-mingw-w64Debian:13 |
All versions, plus listed versions 272828.128.1+bootstrap28.1+exp1 Show 5 moreShow less28.228.32929~exp129~exp2 |
None known |
gcc-mingw-w64Debian:14 |
All versions, plus listed versions 272828.128.1+bootstrap28.1+exp1 Show 5 moreShow less28.228.32929~exp129~exp2 |
None known |
mingw-w64Ubuntu:14.04:LTS |
All versions, plus listed versions 3.0~svn5915-13.0.0-33.1.0-1 |
None known |
mingw-w64Ubuntu:16.04:LTS |
All versions, plus listed versions 4.0.2-44.0.4-14.0.4-2 |
None known |
mingw-w64Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.2-25.0.3-1 |
None known |
mingw-w64Ubuntu:20.04:LTS |
All versions, plus listed versions 6.0.0-36.0.0-47.0.0-2 |
None known |
mingw-w64Ubuntu:22.04:LTS |
All versions, plus listed versions 8.0.0-1 |
None known |
mingw-w64Ubuntu:24.04:LTS |
All versions, plus listed versions 11.0.1-211.0.1-311.0.1-3build1 |
None known |
mingw-w64Ubuntu:25.10 |
All versions, plus listed versions 12.0.0-3 |
None known |
mingw-w64Ubuntu:26.10 |
All versions, plus listed versions 13.0.0-2ubuntu1 |
None known |
mingw-w64Ubuntu:26.04:LTS |
All versions, plus listed versions 12.0.0-313.0.0-1+bootstrap213.0.0-2ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-4973 is a high vulnerability (CVSS 7.8) in Gnu Libssp, published June 7, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. No source names a fixed version.
References
bugzilla.redhat.com/show_bug.cgi?id=1324759
securityfocus.com/bid/92530
openwall.com/lists/oss-security/2016/08/17/6
nvd.nist.gov/vuln/detail/CVE-2016-4973
github.com/advisories/GHSA-fxx4-jm8v-4948
security-tracker.debian.org/tracker/CVE-2016-4973
ubuntu.com/security/CVE-2016-4973
cve.org/CVERecord?id=CVE-2016-4973