PT-2014-2265 · Gnu+3 · Glibc+3

Stefan Cornelius · Publicado 2012-07-18 · Atualizado 2019-04-22 · CVE-2012-3404

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions glibc version 2.12

Description The issue is related to the vfprintf function in the GNU C Library, which does not properly calculate a buffer length. This allows attackers to bypass the FORTIFY SOURCE format-string protection mechanism, potentially causing a denial of service due to stack corruption and crash. The attack is context-dependent and involves the use of a format string with positional parameters and many format specifiers.

Recommendations For glibc version 2.12, consider applying a patch or updating to a newer version that addresses this issue, as the current version does not properly handle buffer length calculations in the vfprintf function.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CESA-2012_1098

CVE-2012-3404

DSA-3169-1

RHSA-2012:1098

RHSA-2012:1200

RHSA-2012_1098

SUSE-SU-2012_1666-1

SUSE-SU-2015:0551-1

Produtos afetados

Centos

Red Hat

Suse

Glibc

Referências · 52

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=12445 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7424 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-3404 · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2012-December/000315.html · Nota
• https://lists.centos.org/pipermail/centos-announce/2012-July/068228.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3404 · Aviso do Fabricante
• https://security.gentoo.org/glsa/201503-04 · Aviso do Fabricante
• https://bugzilla.novell.com/783060 · Nota
• https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=blobdiff;f=posix/spawn_faction_addopen.c;h=40800b8e6e81341501c0fb8a91009529e2048dec;hp=47f62425b696a4fdd511b2a057746322eb6518db;hb=89e435f3559c53084498e9baad22172b64429362;hpb=c3a2ebe1f7541cc35937621e08c28ff88afd0845 · Nota
• http://support.novell.com/security/cve/CVE-2012-3406.html · Nota
• https://packages.debian.org/src:eglibc · Nota
• https://bugzilla.novell.com/767266 · Nota
• https://lists.centos.org/pipermail/centos-announce/2012-July/055672.html · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota