Lucene search
Gentoo FoundationMGASA-2015-0072HistoryFeb 17, 2015 - 9:38 p.m.
Updated glibc packages fix security vulnerabilities
2015-02-1721:38:13
Gentoo Foundation
advisories.mageia.org
8
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.013 Low
EPSS
Percentile
85.7%
Under certain conditions wscanf can allocate too little memory for the to-be-scanned arguments and overflow the allocated buffer (CVE-2015-1472). The incorrect use of “__libc_use_alloca (newsize)” caused a different (and weaker) policy to be enforced which could allow a denial of service attack (CVE-2015-1473).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | glibc | < 2.18-9.9 | glibc-2.18-9.9.mga4 |
Related
ubuntucve
ubuntucve
CVE-2015-1473
2015-02-05 00:00:00
CVE-2015-1472
2015-02-05 00:00:00
archlinux
archlinux
glibc: multiple issues
2015-02-09 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0072)
2022-01-28 00:00:00
RedHat Update for glibc RHSA-2015:2199-07
2015-11-20 00:00:00
Ubuntu: Security Advisory (USN-2519-1)
2015-02-27 00:00:00
nessus
nessus
Oracle Linux 7 : glibc (ELSA-2015-2199)
2015-11-30 00:00:00
CentOS 7 : glibc (CESA-2015:2199)
2015-12-02 00:00:00
RHEL 7 : glibc (RHSA-2015:2199)
2015-11-19 00:00:00
oraclelinux
oraclelinux
glibc security, bug fix, and enhancement update
2015-11-24 00:00:00
redhat
redhat
(RHSA-2015:2199) Moderate: glibc security, bug fix, and enhancement update
2015-11-19 14:39:58
(RHSA-2015:2589) Important: glibc security update
2015-12-09 08:43:11
ubuntu
ubuntu
GNU C Library vulnerabilities
2015-02-26 00:00:00
centos
centos
glibc, nscd security update
2015-11-30 19:30:07
amazon
amazon
Important: glibc
2015-12-14 10:00:00
f5
f5
K19916307 : glibc vulnerability CVE-2015-1473
2019-02-07 00:00:00
SOL16366 - GNU C Library (glibc) vulnerability CVE-2015-1472
2015-04-03 00:00:00
K16366 : GNU C Library (glibc) vulnerability CVE-2015-1472
2015-04-03 00:00:00
prion
prion
Code injection
2015-04-08 10:59:00
Buffer overflow
2015-04-08 10:59:00
cve
cve
CVE-2015-1473
2015-04-08 10:59:00
CVE-2015-1472
2015-04-08 10:59:00
debiancve
debiancve
CVE-2015-1473
2015-04-08 10:59:00
CVE-2015-1472
2015-04-08 10:59:00
securityvulns
securityvulns
GNU glibc multiple security vulnerabilities
2015-03-07 00:00:00
[SECURITY] [DSA 3169-1] eglibc security update
2015-03-07 00:00:00
ibm
ibm
osv
osv
eglibc - security update
2015-02-23 00:00:00
eglibc - security update
2015-03-06 00:00:00
debian
debian
[SECURITY] [DSA 3169-1] eglibc security update
2015-02-23 06:08:58
[SECURITY] [DLA 165-1] eglibc security update
2015-03-06 15:39:53
fedora
fedora
[SECURITY] Fedora 21 Update: glibc-2.20-8.fc21
2015-03-04 10:27:01
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2016-02-17 00:00:00
packetstorm
packetstorm
Cisco Device Hardcoded Credentials / GNU glibc / BusyBox
2019-09-04 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.013 Low
EPSS
Percentile
85.7%
Related for MGASA-2015-0072