Red Hat Security Advisory

RHSA-2013:1605

glibc security, bug fix, and enhancement update

Released 2013-11-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.132.el6, glibc-common-2.12-1.132.el6, glibc-devel-2.12-1.132.el6 +3
Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-2.12-1.132.el6, glibc-static-2.12-1.132.el6
Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.132.el6, glibc-common-2.12-1.132.el6, glibc-devel-2.12-1.132.el6 +3
Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-2.12-1.132.el6, glibc-static-2.12-1.132.el6
Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.132.el6, glibc-2.12-1.132.el6.ppc, glibc-common-2.12-1.132.el6 +5
Red Hat Enterprise Linux Server Optional (v. 6) glibc-2.12-1.132.el6, glibc-static-2.12-1.132.el6, glibc-static-2.12-1.132.el6.ppc
Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.132.el6, glibc-common-2.12-1.132.el6, glibc-devel-2.12-1.132.el6 +3
Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-2.12-1.132.el6, glibc-static-2.12-1.132.el6

Fixes 3 records

TI-2013-01690 CVE-2013-1914 · GHSA-gcw3-7j9c-37j4

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in…

LOW 30

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostnam…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04113 Published 2013-04-29 Fixed CWE-119

TI-2013-00176 CVE-2013-0242 · GHSA-f776-wjgx-67c8

Buffer overflow in the extend_buffers function in the regular expression matcher…

LOW 28

Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02851 Published 2013-02-08 Fixed CWE-119

TI-2013-03795 CVE-2013-4332 · GHSA-jjxr-f8vh-8w2w

Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6)…

LOW 25

Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvall…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02607 Published 2013-10-09 Fixed CWE-189