CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.

• CWE-119

• http://lists.gnu.org/archive/html/bug-gnu-chess/2015-10/msg00002.htmlExploit, Third Party Advisory
• http://svn.savannah.gnu.org/viewvc/chess?revision=134&view=revisionPatch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/13/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/14/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/14/12Mailing List, Third Party Advisory
• http://lists.gnu.org/archive/html/bug-gnu-chess/2015-10/msg00002.htmlExploit, Third Party Advisory
• http://svn.savannah.gnu.org/viewvc/chess?revision=134&view=revisionPatch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/13/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/14/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/14/12Mailing List, Third Party Advisory

Published

Jan 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8966arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before…
• CVE-2015-8967arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allow…7.8
• CVE-2015-8968git-fastclone before 1.0.1 permits arbitrary shell command e…8.8
• CVE-2015-8969git-fastclone before 1.0.5 passes user modifiable strings di…9.8
• CVE-2015-8970crypto/algif_skcipher.c in the Linux kernel before 4.4.2 doe…
• CVE-2015-8971Terminology 0.7.0 allows remote attackers to execute arbitra…7.8
• CVE-2015-8973xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and …
• CVE-2015-8974SQL injection vulnerability in the Group Promotions module i…
• CVE-2015-8975Cross-site scripting (XSS) vulnerability in the error handle…
• CVE-2015-8976Cross-site scripting (XSS) vulnerability in MyBB (aka MyBull…
• CVE-2015-8977MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.…
• CVE-2015-8978In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 an…