Red Hat Security Advisory

RHSA-2012:1097

glibc security and bug fix update

Released 2012-07-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) glibc-2.5-81.el5_8.4, glibc-2.5-81.el5_8.4.i386, glibc-2.5-81.el5_8.4.ia64 +21
Red Hat Enterprise Linux Desktop (v. 5 client) glibc-2.5-81.el5_8.4, glibc-2.5-81.el5_8.4.i386, glibc-common-2.5-81.el5_8.4 +9

Fixes 1 record

TI-2012-02936 CVE-2012-3406 · GHSA-8mj9-m673-h2gf

The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12…

LOW 36

The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allo…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03163 Published 2014-02-10 Fixed CWE-264