Описание
ELSA-2012-1208: glibc security update (MODERATE)
[2.12-1.80.el6_3.5]
- Fix integer overflow leading to buffer overflow in strto* and related out of bounds array index (#847931)
Обновленные пакеты
Oracle Linux 6
Oracle Linux x86_64
glibc
2.12-1.80.el6_3.5
glibc-common
2.12-1.80.el6_3.5
glibc-devel
2.12-1.80.el6_3.5
glibc-headers
2.12-1.80.el6_3.5
glibc-static
2.12-1.80.el6_3.5
glibc-utils
2.12-1.80.el6_3.5
nscd
2.12-1.80.el6_3.5
Oracle Linux i686
glibc
2.12-1.80.el6_3.5
glibc-common
2.12-1.80.el6_3.5
glibc-devel
2.12-1.80.el6_3.5
glibc-headers
2.12-1.80.el6_3.5
glibc-static
2.12-1.80.el6_3.5
glibc-utils
2.12-1.80.el6_3.5
nscd
2.12-1.80.el6_3.5
Связанные CVE
Связанные уязвимости
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, ...
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.