Red Hat Security AdvisoryRHSA-2017:1480
glibc security update
Released 2017-06-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.209.el6_9.2, glibc-common-2.12-1.209.el6_9.2, glibc-devel-2.12-1.209.el6_9.2 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-static-2.12-1.209.el6_9.2
- Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.209.el6_9.2, glibc-common-2.12-1.209.el6_9.2, glibc-devel-2.12-1.209.el6_9.2 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-static-2.12-1.209.el6_9.2
- Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.209.el6_9.2, glibc-2.12-1.209.el6_9.2.ppc, glibc-common-2.12-1.209.el6_9.2 +5
- Red Hat Enterprise Linux Server Optional (v. 6) glibc-static-2.12-1.209.el6_9.2, glibc-static-2.12-1.209.el6_9.2.ppc
- Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.209.el6_9.2, glibc-common-2.12-1.209.el6_9.2, glibc-devel-2.12-1.209.el6_9.2 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-static-2.12-1.209.el6_9.2
Fixes 1 record
Priority LOW 39
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02733 · Published 2017-06-19 · Partial fix CWE-119
