PT-2014-2266 · Gnu+3 · Gnu C Library+3

Stefan Cornelius · Publicado 2012-07-18 · Atualizado 2019-04-22 · CVE-2012-3405

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions GNU C Library (aka glibc) versions 2.14 and other versions

Description The issue arises from a miscalculation of buffer length in the vfprintf function, allowing attackers to bypass format-string protection and cause a denial of service, resulting in a segmentation fault and crash. This occurs when a format string contains a large number of format specifiers, triggering desynchronization within the buffer size handling.

Recommendations For GNU C Library (aka glibc) versions 2.14 and other versions, consider disabling the vfprintf function as a temporary workaround until a patch is available. Restrict the use of format strings with multiple format specifiers to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CESA-2012_1098

CVE-2012-3405

DLA-165-1

DSA-3169-1

RHSA-2012:1098

RHSA-2012:1200

RHSA-2012_1098

SUSE-SU-2015:0551-1

Produtos afetados

Centos

Gnu C Library

Red Hat

Suse

Referências · 38

• https://sourceware.org/bugzilla/show_bug.cgi?id=12445 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7424 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-3404 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3405 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2012-July/068228.html · Nota
• https://security.gentoo.org/glsa/201503-04 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=833704 · Nota
• https://osv.dev/vulnerability/CVE-2012-3405 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3405 · Aviso do Fabricante
• https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=blobdiff;f=posix/spawn_faction_addopen.c;h=40800b8e6e81341501c0fb8a91009529e2048dec;hp=47f62425b696a4fdd511b2a057746322eb6518db;hb=89e435f3559c53084498e9baad22172b64429362;hpb=c3a2ebe1f7541cc35937621e08c28ff88afd0845 · Nota
• https://packages.debian.org/src:eglibc · Nota
• https://lists.centos.org/pipermail/centos-announce/2012-July/055672.html · Nota
• https://osv.dev/vulnerability/DSA-3169-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9402 · Nota de Segurança
• https://linux.oracle.com/errata/ELSA-2012-1098.html · Aviso do Fabricante