glibc: multiple vulnerabilities [LWN.net]

Package(s):

glibc

CVE #(s):

CVE-2012-3404 CVE-2012-3405 CVE-2012-3406

Created:

July 18, 2012

Updated:

August 16, 2012

Description:

From the Red Hat advisory:

Multiple errors in glibc's formatted printing functionality could allow an attacker to bypass FORTIFY_SOURCE protections and execute arbitrary code using a format string flaw in an application, even though these protections are expected to limit the impact of such flaws to an application abort.

Alerts:

Red Hat	RHSA-2012:1098-01	2012-07-18
Red Hat	RHSA-2012:1097-01	2012-07-18
CentOS	CESA-2012:1097	2012-07-18
CentOS	CESA-2012:1098	2012-07-18
Oracle	ELSA-2012-1097	2012-07-19
Oracle	ELSA-2012-1098	2012-07-18
Scientific Linux	SL-glib-20120719	2012-07-19
Scientific Linux	SL-glib-20120719	2012-07-19
Fedora	FEDORA-2012-11508	2012-08-15
Ubuntu	USN-1589-1	2012-10-01
Ubuntu	USN-1589-2	2012-12-17
Mandriva	MDVSA-2013:162	2013-05-07

(Log in to post comments)