Lucene search
Ubuntu.comUB:CVE-2012-4424HistoryOct 09, 2013 - 12:00 a.m.
CVE-2012-4424
2013-10-0900:00:00
ubuntu.com
ubuntu.com
14
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.0%
Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka
glibc or libc6) 2.17 and earlier allows context-dependent attackers to
cause a denial of service (crash) or possibly execute arbitrary code via a
long string that triggers a malloc failure and use of the alloca function.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=689423>
- <http://sourceware.org/bugzilla/show_bug.cgi?id=14552 (dupe)>
- <http://sourceware.org/bugzilla/show_bug.cgi?id=14547>
Notes
| Author | Note |
|---|---|
| jdstrand | introduced in http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=5358d026c74 |
Related
cve
cve
CVE-2012-4424
2013-10-09 22:55:00
debiancve
debiancve
CVE-2012-4424
2013-10-09 22:55:00
prion
prion
Stack overflow
2013-10-09 22:55:00
debian
debian
[SECURITY] [DLA 350-1] eglibc security update
2015-11-26 17:49:39
[SECURITY] [DLA 165-1] eglibc security update
2015-03-06 15:39:53
nessus
nessus
Debian DLA-350-1 : eglibc security update
2015-11-30 00:00:00
Fedora 19 : glibc-2.17-14.fc19 (2013-15316)
2013-08-28 00:00:00
Fedora 19 : glibc-2.17-13.fc19 (2013-15053)
2013-08-22 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-350-1)
2023-03-08 00:00:00
Fedora Update for glibc FEDORA-2013-15316
2013-09-02 00:00:00
Fedora Update for glibc FEDORA-2013-15053
2013-08-23 00:00:00
osv
osv
eglibc - security update
2015-11-26 00:00:00
eglibc - security update
2015-03-06 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: glibc-2.17-14.fc19
2013-08-27 23:29:45
[SECURITY] Fedora 19 Update: glibc-2.17-13.fc19
2013-08-22 00:50:09
[SECURITY] Fedora 19 Update: glibc-2.17-18.fc19
2013-09-28 00:07:09
securityvulns
securityvulns
glibc security vulnerabilities
2013-12-01 00:00:00
[ MDVSA-2013:284 ] glibc
2013-12-01 00:00:00
mageia
mageia
Updated glibc packages fix security vulnerabilities
2015-05-06 18:16:01
Updated glibc package fixes security vulnerabilities
2013-11-22 22:44:49
altlinux
altlinux
Security fix for the ALT Linux 7 package glibc version 6:2.17-alt6
2014-01-11 00:00:00
Security fix for the ALT Linux 9 package glibc version 6:2.17-alt6
2014-01-11 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2013-10-21 00:00:00
slackware
slackware
[slackware-security] glibc
2014-10-24 05:36:04
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2015-03-08 00:00:00
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.0%
Related for UB:CVE-2012-4424