Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2432-1
HistoryDec 03, 2014 - 12:00 a.m.

GNU C Library vulnerabilities

2014-12-0300:00:00
ubuntu.com
36

9.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

87.1%

JSON

Releases

  • Ubuntu 14.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • eglibc - GNU C Library
  • glibc - GNU C Library

Details

Siddhesh Poyarekar discovered that the GNU C Library incorrectly handled
certain multibyte characters when using the iconv function. An attacker
could possibly use this issue to cause applications to crash, resulting in
a denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu
12.04 LTS. (CVE-2012-6656)

Adhemerval Zanella Netto discovered that the GNU C Library incorrectly
handled certain multibyte characters when using the iconv function. An
attacker could possibly use this issue to cause applications to crash,
resulting in a denial of service. (CVE-2014-6040)

Tim Waugh discovered that the GNU C Library incorrectly enforced the
WRDE_NOCMD flag when handling the wordexp function. An attacker could
possibly use this issue to execute arbitrary commands. (CVE-2014-7817)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchlibc6< 2.19-10ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibc-bin< 2.19-10ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibc-dev-bin< 2.19-10ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibc6-dbg< 2.19-10ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibc6-dev< 2.19-10ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibc6-dev-i386< 2.19-10ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibc6-dev-x32< 2.19-10ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibc6-i386< 2.19-10ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibc6-pic< 2.19-10ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibc6-prof< 2.19-10ubuntu2.1UNKNOWN
Rows per page:
1-10 of 591

Related

nessus 43
openvas 33
debian 2
osv 2
oraclelinux 4
redhat 3
amazon 2
centos 3
securityvulns 3
ibm 12
fedora 2
suse 3
altlinux 1
prion 3
ubuntucve 3
cve 3
f5 6
debiancve 3
archlinux 1
mageia 2
gentoo 2
slackware 1
oracle 2
nessus
nessus
Debian DLA-97-1 : eglibc security update
2015-03-26 00:00:00
Ubuntu 14.04 LTS : GNU C Library vulnerabilities (USN-2432-1)
2014-12-04 00:00:00
Debian DSA-3142-1 : eglibc - security update
2015-01-28 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2432-1)
2022-08-26 00:00:00
Debian: Security Advisory (DLA-97-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3142-1 (eglibc - security update)
2015-01-27 00:00:00
debian
debian
[SECURITY] [DLA 97-1] eglibc security update
2014-11-29 18:51:24
[SECURITY] [DSA 3142-1] eglibc security update
2015-01-27 15:39:01
osv
osv
eglibc - security update
2014-11-29 00:00:00
eglibc - security update
2015-01-27 00:00:00
oraclelinux
oraclelinux
glibc security and bug fix update
2015-01-07 00:00:00
glibc security and bug fix update
2015-03-09 00:00:00
glibc security and bug fix update
2014-12-18 00:00:00
redhat
redhat
(RHSA-2015:0016) Moderate: glibc security and bug fix update
2015-01-07 00:00:00
(RHSA-2014:2023) Moderate: glibc security and bug fix update
2014-12-18 00:00:00
(RHSA-2015:0327) Moderate: glibc security and bug fix update
2015-03-05 00:00:00
amazon
amazon
Medium: glibc
2015-01-08 12:38:00
Medium: glibc
2015-03-23 08:30:00
centos
centos
glibc, nscd security update
2015-01-07 22:45:41
glibc, nscd security update
2014-12-19 12:43:11
glibc, nscd security update
2015-03-17 13:28:04
securityvulns
securityvulns
GNU glibc buffer overflow
2014-09-01 00:00:00
GNU glibc code execution
2014-11-30 00:00:00
[ MDVSA-2014:232 ] glibc
2014-11-30 00:00:00
ibm
ibm
Security Bulletin: PowerKVM is affected by glibc vulnerabilities (Multiple CVEs)
2018-06-18 01:28:19
Security Bulletin: GNU C Library (glibc) Vulnerability Affects Power Hardware Management Console (CVE-2015-0235, CVE-2014-6040, CVE-2014-7817)
2021-09-23 01:31:39
Security Bulletin: GNU C library (glibc) vulnerability affect IBM DataPower Gateway appliances (CVE-2014-6040)
2018-06-15 07:02:32
fedora
fedora
[SECURITY] Fedora 20 Update: glibc-2.18-19.fc20
2015-03-04 10:25:31
[SECURITY] Fedora 21 Update: glibc-2.20-8.fc21
2015-03-04 10:27:01
suse
suse
Security update for glibc (important)
2014-09-15 19:06:41
Security update for glibc (important)
2014-09-15 19:04:18
glibc (important)
2014-09-11 09:04:39
altlinux
altlinux
Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.3
2015-12-23 00:00:00
prion
prion
Out-of-bounds
2014-12-05 16:59:00
Input validation
2014-11-24 15:59:00
Out-of-bounds
2014-12-05 16:59:00
ubuntucve
ubuntucve
CVE-2012-6656
2012-12-31 00:00:00
CVE-2014-7817
2014-11-24 00:00:00
CVE-2014-6040
2014-09-02 00:00:00
cve
cve
CVE-2012-6656
2014-12-05 16:59:00
CVE-2014-7817
2014-11-24 15:59:00
CVE-2014-6040
2014-12-05 16:59:00
f5
f5
SOL16342 - GNU C Library (glibc) vulnerability CVE-2012-6656
2015-04-01 00:00:00
K16342 : GNU C Library (glibc) vulnerability CVE-2012-6656
2015-07-23 00:00:00
SOL16010 - GNU C Library (glibc) vulnerability CVE-2014-7817
2015-01-21 00:00:00
debiancve
debiancve
CVE-2012-6656
2014-12-05 16:59:00
CVE-2014-7817
2014-11-24 15:59:00
CVE-2014-6040
2014-12-05 16:59:00
archlinux
archlinux
glibc: command execution
2014-11-21 00:00:00
mageia
mageia
Updated glibc packages fix CVE-2014-7817
2014-11-26 20:29:06
Updated glibc packages fix multiple security vulnerabilities
2014-09-15 14:36:30
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2016-02-17 00:00:00
GNU C Library: Multiple vulnerabilities
2015-03-08 00:00:00
slackware
slackware
[slackware-security] glibc
2014-10-24 05:36:04
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00

9.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

87.1%

JSON
Related for USN-2432-1
nessus43openvas33debian2osv2oraclelinux4redhat3amazon2centos3securityvulns3ibm12fedora2suse3altlinux1prion3ubuntucve3cve3f56debiancve3archlinux1mageia2gentoo2slackware1oracle2