Lucene search
+L

1 matches found

OSV
OSV
added 2015/01/08 12:24 p.m.13 views

MGASA-2015-0013 Updated glibc packages fix security vulnerabilities

The vfprintf function in stdio-common/vfprintf.c in GNU C Library aka glibc 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context- dependent attackers to bypass the FORTIFYSOURCE format-string...

7.8CVSS7.6AI score0.07834EPSS
SaveExploits3References2
Rows per page
Query Builder