PT-2013-1211 · Gnu+3 · Glibc+3
Captain Planet
+1
·
Publicado
2012-03-15
·
Atualizado
2023-02-13
·
CVE-2012-0864
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
glibc versions prior to 2.15-r3
Description
The issue concerns multiple vulnerabilities in the glibc package, which can lead to breaches of confidentiality, integrity, and availability of protected information. Exploitation can occur locally. Specifically, an integer overflow in the
vfprintf function allows attackers to bypass the FORTIFY SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.Recommendations
For glibc versions prior to 2.15-r3, update to version 2.15-r3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
vfprintf function until a patch is available.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Red Hat
Suse
Glibc