GNU glibc Formatted Printing Functionality Multiple Security Vulnerabilities
BID:54374
Info
GNU glibc Formatted Printing Functionality Multiple Security Vulnerabilities
| Bugtraq ID: | 54374 |
| Class: | Unknown |
| CVE: |
CVE-2012-3406 CVE-2012-3404 CVE-2012-3405 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 11 2012 12:00AM |
| Updated: | Apr 13 2015 09:57PM |
| Credit: | Stefan Cornelius |
| Vulnerable: |
VMWare ESXi 5.1 Patch ESXi510-201212101 VMWare ESXi 5.0 Patch ESXi500-201212101-SG VMWare ESXi 4.1 VMWare ESXi 4.0 VMWare ESXi 3.5 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Redhat Enterprise Virtualization Hypervisor for RHEL 6 0 Redhat Enterprise Virtualization Hypervisor for RHEL 5 0 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 GNU glibc 2.12.2 GNU glibc 2.12.1 GNU glibc 2.11.2 GNU glibc 2.11.1 GNU glibc 2.10.1 GNU glibc 2.5 GNU glibc 2.3.10 GNU glibc 2.3.4 GNU glibc 2.3.3 GNU glibc 2.3.2 GNU glibc 2.3.1 GNU glibc 2.3 GNU glibc 2.2.5 GNU glibc 2.2.4 GNU glibc 2.2.3 GNU glibc 2.2.2 GNU glibc 2.2.1 GNU glibc 2.2 GNU glibc 2.1.9 and Greater GNU glibc 2.1.9 GNU glibc 2.1.3 -10 GNU glibc 2.1.3 GNU glibc 2.1.2 GNU glibc 2.1.1 -6 GNU glibc 2.1.1 GNU glibc 2.1 GNU glibc 2.0.6 GNU glibc 2.0.5 GNU glibc 2.0.4 GNU glibc 2.0.3 GNU glibc 2.0.2 GNU glibc 2.0.1 GNU glibc 2.0 GNU glibc 2.7 GNU glibc 2.14.1 GNU glibc 2.14 GNU glibc 2.14 GNU glibc 2.13 GNU glibc 2.12 GNU glibc 0 GNU Cfengine 1.2.3 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
GNU glibc Formatted Printing Functionality Multiple Security Vulnerabilities
GNU glibc is prone to multiple security vulnerabilities in the formatted printing functionality that allow attackers to corrupt memory or bypass certain security protection mechanisms.
An attacker can exploit these issues to bypass certain security protections or execute arbitrary code in the context of the applications using the affected library. Failed exploit attempts will likely crash the application.
GNU glibc is prone to multiple security vulnerabilities in the formatted printing functionality that allow attackers to corrupt memory or bypass certain security protection mechanisms.
An attacker can exploit these issues to bypass certain security protections or execute arbitrary code in the context of the applications using the affected library. Failed exploit attempts will likely crash the application.
Solution / Fix
GNU glibc Formatted Printing Functionality Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
Solution:
Updates are available. Please see the references for more information.
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva glibc-2.8-1.20080520.5.9mnb2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-devel-2.8-1.20080520.5.9mnb2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-doc-2.8-1.20080520.5.9mnb2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-doc-pdf-2.8-1.20080520.5.9mnb2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-i18ndata-2.8-1.20080520.5.9mnb2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-profile-2.8-1.20080520.5.9mnb2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-static-devel-2.8-1.20080520.5.9mnb2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-utils-2.8-1.20080520.5.9mnb2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva nscd-2.8-1.20080520.5.9mnb2.x86_64.rpm
http://www.mandriva.com/en/downloads/
MandrakeSoft Enterprise Server 5
-
Mandriva glibc-2.8-1.20080520.5.9mnb2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-devel-2.8-1.20080520.5.9mnb2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-doc-2.8-1.20080520.5.9mnb2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-doc-pdf-2.8-1.20080520.5.9mnb2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-i18ndata-2.8-1.20080520.5.9mnb2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-profile-2.8-1.20080520.5.9mnb2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-static-devel-2.8-1.20080520.5.9mnb2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva glibc-utils-2.8-1.20080520.5.9mnb2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva nscd-2.8-1.20080520.5.9mnb2.i586.rpm
http://www.mandriva.com/en/downloads/
References
GNU glibc Formatted Printing Functionality Multiple Security Vulnerabilities
References:
References:
- glibc formatted printing vulnerabilities (Stefan Cornelius)
- GNU C Library Homepage (GNU)
- VMSA-2012-0018 VMware Security Advisory (VMware)