Red Hat Security Advisory

RHSA-2012:0126

glibc security update

Released 2012-02-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) glibc-2.5-65.el5_7.3, glibc-2.5-65.el5_7.3.i386, glibc-2.5-65.el5_7.3.ia64 +21
Red Hat Enterprise Linux Desktop (v. 5 client) glibc-2.5-65.el5_7.3, glibc-2.5-65.el5_7.3.i386, glibc-common-2.5-65.el5_7.3 +9

Fixes 5 records

TI-2009-04784 CVE-2009-5029 · GHSA-m45f-chfc-x7hh

Integer overflow in the __tzfile_read function in glibc before 2.15 allows…

MEDIUM 41

Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonst…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.08762 Published 2013-05-02 Partial fix CWE-189

TI-2010-00791 CVE-2010-0830 · GHSA-5gq9-qhr6-c66r

Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in…

LOW 31

Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote a…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.04514 Published 2010-06-01 Fixed CWE-189

TI-2009-04818 CVE-2009-5064 · GHSA-jx79-x2m5-439p

ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain…

LOW 31

ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00522 Published 2011-03-30 Fixed CWE-264

TI-2011-03975 CVE-2011-4609 · GHSA-crf6-458w-xw5q

The svc_run function in the RPC implementation in glibc before 2.15 allows remote…

LOW 27

The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01834 Published 2013-05-02 Fixed CWE-399

TI-2011-00942 CVE-2011-1089 · GHSA-h832-96qp-642g

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does…

LOW 16

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corru…

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00421 Published 2011-04-10 Fixed CWE-16