Red Hat Security AdvisoryRHSA-2012:0058
glibc security and bug fix update
Released 2012-01-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.47.el6_2.5, glibc-common-2.12-1.47.el6_2.5, glibc-devel-2.12-1.47.el6_2.5 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-2.12-1.47.el6_2.5, glibc-static-2.12-1.47.el6_2.5
- Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.47.el6_2.5, glibc-common-2.12-1.47.el6_2.5, glibc-devel-2.12-1.47.el6_2.5 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-2.12-1.47.el6_2.5, glibc-static-2.12-1.47.el6_2.5
- Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.47.el6_2.5, glibc-2.12-1.47.el6_2.5.ppc, glibc-common-2.12-1.47.el6_2.5 +5
- Red Hat Enterprise Linux Server Optional (v. 6) glibc-2.12-1.47.el6_2.5, glibc-static-2.12-1.47.el6_2.5, glibc-static-2.12-1.47.el6_2.5.ppc
- Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.47.el6_2.5, glibc-common-2.12-1.47.el6_2.5, glibc-devel-2.12-1.47.el6_2.5 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-2.12-1.47.el6_2.5, glibc-static-2.12-1.47.el6_2.5
Fixes 2 records
Priority MEDIUM 41
Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonst…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.08762 · Published 2013-05-02 · Partial fix CWE-189
Priority LOW 27
The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01834 · Published 2013-05-02 · Fixed CWE-399
