Lucene search

CVE-2012-3404

🗓️ 10 Feb 2014 18:10:15Reported by redhatType

The vfprintf function in GNU C Library does not properly calculate a buffer length, allowing attackers to bypass protection mechanisms and cause a denial of service via a format string

Reporter	Title	Published	Views	Family All 65
Cvelist	CVE-2012-3404	10 Feb 201417:00	–	cvelist
Cvelist	CVE-2012-3405	10 Feb 201417:00	–	cvelist
Cvelist	CVE-2012-3406	10 Feb 201417:00	–	cvelist
UbuntuCve	CVE-2012-3404	13 Jul 201200:00	–	ubuntucve
Prion	Format string	10 Feb 201418:15	–	prion
Prion	Format string	10 Feb 201418:15	–	prion
Prion	Format string	10 Feb 201418:15	–	prion
Debian CVE	CVE-2012-3404	10 Feb 201418:15	–	debiancve
Debian CVE	CVE-2012-3405	10 Feb 201418:15	–	debiancve
Debian CVE	CVE-2012-3406	10 Feb 201418:15	–	debiancve

Nvd

Node

gnu glibcMatch2.12

redhat enterprise_virtualizationMatch3.0

canonical ubuntu_linuxMatch8.04-lts

canonical ubuntu_linuxMatch10.04-lts

canonical ubuntu_linuxMatch11.04

canonical ubuntu_linuxMatch11.10

canonical ubuntu_linuxMatch12.04-lts

redhat enterprise_linuxMatch6.0

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2012-1098.html
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
rhn	www.rhn.redhat.com/errata/RHSA-2012-1200.html
ubuntu	www.ubuntu.com/usn/USN-1589-1
openwall	www.openwall.com/lists/oss-security/2012/07/11/17
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.gentoo.org/glsa/201503-04

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Feb 2014 18:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS25

EPSS0.016

CWE-189