Red Hat Security AdvisoryRHSA-2012:1098
glibc security and bug fix update
Released 2012-07-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.80.el6_3.3, glibc-common-2.12-1.80.el6_3.3, glibc-devel-2.12-1.80.el6_3.3 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-2.12-1.80.el6_3.3, glibc-static-2.12-1.80.el6_3.3
- Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.80.el6_3.3, glibc-common-2.12-1.80.el6_3.3, glibc-devel-2.12-1.80.el6_3.3 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-2.12-1.80.el6_3.3, glibc-static-2.12-1.80.el6_3.3
- Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.80.el6_3.3, glibc-2.12-1.80.el6_3.3.ppc, glibc-common-2.12-1.80.el6_3.3 +5
- Red Hat Enterprise Linux Server Optional (v. 6) glibc-2.12-1.80.el6_3.3, glibc-static-2.12-1.80.el6_3.3, glibc-static-2.12-1.80.el6_3.3.ppc
- Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.80.el6_3.3, glibc-common-2.12-1.80.el6_3.3, glibc-devel-2.12-1.80.el6_3.3 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-2.12-1.80.el6_3.3, glibc-static-2.12-1.80.el6_3.3
Fixes 3 records
Priority LOW 36
The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allo…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03163 · Published 2014-02-10 · Fixed CWE-264
Priority LOW 27
The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SO…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02087 · Published 2014-02-10 · Fixed CWE-189
Priority LOW 27
The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SO…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02225 · Published 2014-02-10 · Fixed CWE-189
THREATIST.IORead the docs