Red Hat Security AdvisoryRHSA-2017:1479
glibc security update
Released 2017-06-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) glibc-2.17-106.el7_2.9, glibc-common-2.17-106.el7_2.9, glibc-devel-2.17-106.el7_2.9 +3
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) glibc-static-2.17-106.el7_2.9
- Red Hat Enterprise Linux HPC Node EUS (v. 6.7) glibc-2.12-1.166.el6_7.8, glibc-common-2.12-1.166.el6_7.8, glibc-devel-2.12-1.166.el6_7.8 +3
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) glibc-static-2.12-1.166.el6_7.8
- Red Hat Enterprise Linux Long Life (v. 5.9 server) glibc-2.5-107.el5_9.9, glibc-2.5-107.el5_9.9.i386, glibc-common-2.5-107.el5_9.9 +9
- Red Hat Enterprise Linux Server (v. 5 ELS) glibc-2.5-123.el5_11.4, glibc-2.5-123.el5_11.4.i386, glibc-common-2.5-123.el5_11.4 +9
- Red Hat Enterprise Linux Server AUS (v. 6.2) glibc-2.12-1.47.el6_2.18, glibc-common-2.12-1.47.el6_2.18, glibc-devel-2.12-1.47.el6_2.18 +3
- Red Hat Enterprise Linux Server AUS (v. 6.4) glibc-2.12-1.107.el6_4.10, glibc-common-2.12-1.107.el6_4.10, glibc-devel-2.12-1.107.el6_4.10 +3
- Red Hat Enterprise Linux Server AUS (v. 6.5) glibc-2.12-1.132.el6_5.9, glibc-common-2.12-1.132.el6_5.9, glibc-devel-2.12-1.132.el6_5.9 +3
- Red Hat Enterprise Linux Server AUS (v. 6.6) glibc-2.12-1.149.el6_6.12, glibc-common-2.12-1.149.el6_6.12, glibc-devel-2.12-1.149.el6_6.12 +3
- Red Hat Enterprise Linux Server EUS (v. 6.7) glibc-2.12-1.166.el6_7.8, glibc-2.12-1.166.el6_7.8.ppc, glibc-common-2.12-1.166.el6_7.8 +5
- Red Hat Enterprise Linux Server EUS (v. 7.2) glibc-2.17-106.el7_2.9, glibc-2.17-106.el7_2.9.ppc, glibc-common-2.17-106.el7_2.9 +5
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) glibc-2.12-1.47.el6_2.18, glibc-static-2.12-1.47.el6_2.18
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4) glibc-2.12-1.107.el6_4.10, glibc-static-2.12-1.107.el6_4.10
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) glibc-2.12-1.132.el6_5.9, glibc-static-2.12-1.132.el6_5.9
- Red Hat Enterprise Linux Server Optional AUS (v. 6.6) glibc-static-2.12-1.149.el6_6.12
- Red Hat Enterprise Linux Server Optional EUS (v. 6.7) glibc-static-2.12-1.166.el6_7.8, glibc-static-2.12-1.166.el6_7.8.ppc
- Red Hat Enterprise Linux Server Optional EUS (v. 7.2) glibc-static-2.17-106.el7_2.9, glibc-static-2.17-106.el7_2.9.ppc
- Red Hat Enterprise Linux Server Optional TUS (v. 6.5) glibc-2.12-1.132.el6_5.9, glibc-static-2.12-1.132.el6_5.9
- Red Hat Enterprise Linux Server Optional TUS (v. 6.6) glibc-static-2.12-1.149.el6_6.12
- Red Hat Enterprise Linux Server TUS (v. 6.5) glibc-2.12-1.132.el6_5.9, glibc-common-2.12-1.132.el6_5.9, glibc-devel-2.12-1.132.el6_5.9 +3
- Red Hat Enterprise Linux Server TUS (v. 6.6) glibc-2.12-1.149.el6_6.12, glibc-common-2.12-1.149.el6_6.12, glibc-devel-2.12-1.149.el6_6.12 +3
Fixes 1 record
Priority LOW 39
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02733 · Published 2017-06-19 · Partial fix CWE-119