Red Hat Security AdvisoryRHSA-2015:0863
glibc security and bug fix update
Released 2015-04-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.149.el6_6.7, glibc-common-2.12-1.149.el6_6.7, glibc-devel-2.12-1.149.el6_6.7 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-static-2.12-1.149.el6_6.7
- Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.149.el6_6.7, glibc-common-2.12-1.149.el6_6.7, glibc-devel-2.12-1.149.el6_6.7 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-static-2.12-1.149.el6_6.7
- Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.149.el6_6.7, glibc-2.12-1.149.el6_6.7.ppc, glibc-common-2.12-1.149.el6_6.7 +5
- Red Hat Enterprise Linux Server Optional (v. 6) glibc-static-2.12-1.149.el6_6.7, glibc-static-2.12-1.149.el6_6.7.ppc
- Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.149.el6_6.7, glibc-common-2.12-1.149.el6_6.7, glibc-devel-2.12-1.149.el6_6.7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-static-2.12-1.149.el6_6.7
Fixes 2 records
Priority LOW 38
Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrar…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05012 · Published 2015-09-28 · Partial fix CWE-119
Priority LOW 32
The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05808 · Published 2015-02-24 · Fixed CWE-17
