Red Hat Security Advisory

RHSA-2014:1391

glibc security, bug fix, and enhancement update

Released 2014-10-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.149.el6, glibc-common-2.12-1.149.el6, glibc-devel-2.12-1.149.el6 +3
Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-static-2.12-1.149.el6
Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.149.el6, glibc-common-2.12-1.149.el6, glibc-devel-2.12-1.149.el6 +3
Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-static-2.12-1.149.el6
Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.149.el6, glibc-2.12-1.149.el6.ppc, glibc-common-2.12-1.149.el6 +5
Red Hat Enterprise Linux Server Optional (v. 6) glibc-static-2.12-1.149.el6, glibc-static-2.12-1.149.el6.ppc
Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.149.el6, glibc-common-2.12-1.149.el6, glibc-devel-2.12-1.149.el6 +3
Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-static-2.12-1.149.el6

Fixes 3 records

TI-2013-03708 CVE-2013-4237 · GHSA-2w2q-5vg5-jx48

sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier…

LOW 37

sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03832 Published 2013-10-09 Partial fix CWE-119

TI-2013-03908 CVE-2013-4458 · GHSA-jcwq-q9mq-r3fv

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in…

LOW 30

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostnam…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04154 Published 2013-12-12 Partial fix CWE-119

TI-2013-06079 CVE-2013-7424 · GHSA-cf2r-3fcj-q45r

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN…

LOW 28

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02682 Published 2015-08-26 Fixed CWE-17