RHEL 6 : glibc (RHSA-2011:0413)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0413 advisory. The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the...

Important: Red Hat Security Advisory: glibc security update

Updated glibc packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

glibc: insufficient quoting in the locale command output

locale/programs/locale.c in locale in the GNU C Library aka glibc or libc6 before 2.13 does not quote its output, which might allow local users to gain privileges via a crafted localization environment variable, in conjunction with a program that executes a script that uses the eval function...

glibc: fix causes linker to search CWD when running privileged program with $ORIGIN in R*PATH

Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library aka glibc or libc6, including glibc-2.5-49.el55.6 and glibc-2.12-1.7.el60.3 in Red Hat Enterprise Linux, allow local users to gain privileges via a crafted dynamic shared object DSO...

glibc: fnmatch() alloca()-based memory corruption flaw

The GNU C Library aka glibc or libc6 before 2.12.2 and Embedded GLIBC EGLIBC allow context-dependent attackers to execute arbitrary code or cause a denial of service memory consumption via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to...

glibc: insufficient quoting in the locale command output

locale/programs/locale.c in locale in the GNU C Library aka glibc or libc6 before 2.13 does not quote its output, which might allow local users to gain privileges via a crafted localization environment variable, in conjunction with a program that executes a script that uses the eval function...

Important: Red Hat Security Advisory: glibc security update

Updated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

PT-2011-1087 · Gnu +1 · Glibc-Devel +7

Name of the Vulnerable Software and Affected Versions: glibc versions 2.3.4 glibc-utils versions 2.3.4 glibc-common versions 2.3.4 glibc-devel versions 2.3.4 glibc-profile versions 2.3.4 glibc-headers versions 2.3.4 nptl-devel version 2.3.4 glibc versions prior to 2.15-r3 Description: The issue...

PT-2011-1089 · Gnu +1 · Glibc-Devel +7

Name of the Vulnerable Software and Affected Versions: glibc versions 2.3.4 glibc versions prior to 2.15-r3 glibc-utils versions 2.3.4 glibc-devel versions 2.3.4 glibc-common versions 2.3.4 glibc-profile versions 2.3.4 glibc-headers versions 2.3.4 nptl-devel version 2.3.4 Description: The issue...

glibc security update

2.12-1.7.el60.5 - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpath when skipping the first element, ignore rpath elements containing non-isolated use of when privileged 667974, CVE-2011-0536...

PT-2011-1195

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.15-r3 Description The issue affects the glibc package in Gentoo Linux, potentially compromising the confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be...

PT-2011-1090

Name of the Vulnerable Software and Affected Versions glibc versions 2.3.4 through 2.13 glibc-utils versions 2.3.4 glibc-common versions 2.3.4 glibc-devel versions 2.3.4 glibc-profile versions 2.3.4 glibc-headers versions 2.3.4 nptl-devel version 2.3.4 Description The issue involves multiple...

glibc security update

2.5-58.el56.2 - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpath when skipping the first element, ignore rpath elements containing non-isolated use of when privileged 667974, CVE-2011-0536 - Fix...

PT-2011-1194 · Gnu +1 · Glibc +1

Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.15-r3 GNU C Library glibc versions 2.5-49.el5 5.6 GNU C Library glibc versions 2.12-1.7.el6 0.3 Description: The issue concerns multiple vulnerabilities in the glibc package, which can lead to breaches of...

CVE-2009-5064

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...

CVE-2009-5064

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...

Code injection

DISPUTED ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a...

CVE-2009-5064

CVE-2009-5064 concerns glibc

CVE-2009-5064: Undefined Security Weakness

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...

PT-2011-1091 · Gnu +1 · Nptl-Devel +7

Name of the Vulnerable Software and Affected Versions: glibc versions 2.3.4 and earlier glibc-utils versions 2.3.4 and earlier glibc-common versions 2.3.4 and earlier glibc-devel versions 2.3.4 and earlier glibc-profile versions 2.3.4 and earlier glibc-headers versions 2.3.4 and earlier nptl-deve...