Red Hat Security Advisory

RHSA-2017:0680

glibc security and bug fix update

Released 2017-03-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.209.el6, glibc-common-2.12-1.209.el6, glibc-devel-2.12-1.209.el6 +3
Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-static-2.12-1.209.el6
Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.209.el6, glibc-common-2.12-1.209.el6, glibc-devel-2.12-1.209.el6 +3
Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-static-2.12-1.209.el6
Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.209.el6, glibc-2.12-1.209.el6.ppc, glibc-common-2.12-1.209.el6 +5
Red Hat Enterprise Linux Server Optional (v. 6) glibc-static-2.12-1.209.el6, glibc-static-2.12-1.209.el6.ppc
Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.209.el6, glibc-common-2.12-1.209.el6, glibc-devel-2.12-1.209.el6 +3
Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-static-2.12-1.209.el6

Fixes 4 records

TI-2015-07226 CVE-2015-8779 · GHSA-p8hg-r2c3-83hv

Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or…

MEDIUM 51

Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06206 Published 2016-04-19 Partial fix CWE-119

TI-2015-07225 CVE-2015-8778 · GHSA-4r54-pcmf-cg7r

Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows…

MEDIUM 51

Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the _…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05738 Published 2016-04-19 Partial fix CWE-119

TI-2014-07940 CVE-2014-9761 · GHSA-vf4r-x8xm-qwqj

Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before…

MEDIUM 50

Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05506 Published 2016-04-19 Partial fix CWE-119

TI-2015-07223 CVE-2015-8776 · GHSA-mm79-9vr7-wx53

The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows…

MEDIUM 47

The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.048 Published 2016-04-19 Partial fix CWE-189