Red Hat Security AdvisoryRHSA-2016:0176
glibc security and bug fix update
Released 2016-02-16 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) glibc-2.17-106.el7_2.4, glibc-common-2.17-106.el7_2.4, glibc-devel-2.17-106.el7_2.4 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glibc-static-2.17-106.el7_2.4
- Red Hat Enterprise Linux ComputeNode (v. 7) glibc-2.17-106.el7_2.4, glibc-common-2.17-106.el7_2.4, glibc-devel-2.17-106.el7_2.4 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-static-2.17-106.el7_2.4
- Red Hat Enterprise Linux Server (v. 7) glibc-2.17-106.el7_2.4, glibc-2.17-106.el7_2.4.ppc, glibc-common-2.17-106.el7_2.4 +5
- Red Hat Enterprise Linux Server Optional (v. 7) glibc-static-2.17-106.el7_2.4, glibc-static-2.17-106.el7_2.4.ppc
- Red Hat Enterprise Linux Workstation (v. 7) glibc-2.17-106.el7_2.4, glibc-common-2.17-106.el7_2.4, glibc-devel-2.17-106.el7_2.4 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-static-2.17-106.el7_2.4
Fixes 2 records
Priority HIGH 79
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash…
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.92385 · Published 2016-02-18 · Partial fix CWE-119
Priority LOW 37
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02238 · Published 2016-04-08 · Fixed CWE-17