Red Hat Security AdvisoryRHSA-2015:2199
glibc security, bug fix, and enhancement update
Released 2015-11-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) glibc-2.17-105.el7, glibc-common-2.17-105.el7, glibc-devel-2.17-105.el7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glibc-static-2.17-105.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) glibc-2.17-105.el7, glibc-common-2.17-105.el7, glibc-devel-2.17-105.el7 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-static-2.17-105.el7
- Red Hat Enterprise Linux Server (v. 7) glibc-2.17-105.el7, glibc-2.17-105.el7.ppc, glibc-common-2.17-105.el7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) glibc-static-2.17-105.el7, glibc-static-2.17-105.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) glibc-2.17-105.el7, glibc-common-2.17-105.el7, glibc-devel-2.17-105.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-static-2.17-105.el7
Fixes 4 records
Priority MEDIUM 40
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denia…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04688 · Published 2015-04-08 · Fixed CWE-119
Priority LOW 38
Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrar…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05012 · Published 2015-09-28 · Partial fix CWE-119
Priority LOW 33
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02129 · Published 2015-04-08 · Fixed CWE-119
Priority LOW 32
The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05808 · Published 2015-02-24 · Fixed CWE-17
THREATIST.IORead the docs