Red Hat Security AdvisoryRHSA-2011:0413
glibc security update
Released 2011-04-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.7.el6_0.5, glibc-common-2.12-1.7.el6_0.5, glibc-devel-2.12-1.7.el6_0.5 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-2.12-1.7.el6_0.5, glibc-static-2.12-1.7.el6_0.5
- Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.7.el6_0.5, glibc-common-2.12-1.7.el6_0.5, glibc-devel-2.12-1.7.el6_0.5 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-2.12-1.7.el6_0.5, glibc-static-2.12-1.7.el6_0.5, nscd-2.12-1.7.el6_0.5
- Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.7.el6_0.5, glibc-2.12-1.7.el6_0.5.ppc, glibc-common-2.12-1.7.el6_0.5 +5
- Red Hat Enterprise Linux Server Optional (v. 6) glibc-2.12-1.7.el6_0.5, glibc-static-2.12-1.7.el6_0.5
- Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.7.el6_0.5, glibc-common-2.12-1.7.el6_0.5, glibc-devel-2.12-1.7.el6_0.5 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-2.12-1.7.el6_0.5, glibc-static-2.12-1.7.el6_0.5
Fixes 5 records
Priority LOW 39
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that i…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.14323 · Published 2011-04-08 · Fixed CWE-399
Priority LOW 32
Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (aka glibc or libc6), including glibc-2.5-49.el5_5.6 and glibc-2.12-1.7.el6_0.3 in Red Hat Enterprise Li…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00787 · Published 2011-04-08 · Fixed
Priority LOW 28
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02856 · Published 2011-04-08 · Fixed CWE-189
Priority LOW 28
locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, which might allow local users to gain privileges via a crafted localization environment variable, in con…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00518 · Published 2011-04-10 · Fixed CWE-264
Priority LOW 17
ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00311 · Published 2011-04-08 · Partial fix CWE-264
THREATIST.IORead the docs