Логотип exploitDog
bind:CVE-2012-3405
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-3405

Количество 7

Количество 7

ubuntu логотип

CVE-2012-3405

больше 11 лет назад

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

CVSS2: 5
EPSS: Низкий
redhat логотип

CVE-2012-3405

около 13 лет назад

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

CVSS2: 6.8
EPSS: Низкий
nvd логотип

CVE-2012-3405

больше 11 лет назад

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2012-3405

больше 11 лет назад

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Libr ...

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-fwxh-prpx-6qg8

больше 3 лет назад

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1098

около 13 лет назад

ELSA-2012-1098: glibc security and bug fix update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:0551-1

почти 12 лет назад

Security update for glibc

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-3405

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

CVSS2: 5
1%
Низкий
больше 11 лет назад
redhat логотип
CVE-2012-3405

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

CVSS2: 6.8
1%
Низкий
около 13 лет назад
nvd логотип
CVE-2012-3405

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

CVSS2: 5
1%
Низкий
больше 11 лет назад
debian логотип
CVE-2012-3405

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Libr ...

CVSS2: 5
1%
Низкий
больше 11 лет назад
github логотип
GHSA-fwxh-prpx-6qg8

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

1%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2012-1098

ELSA-2012-1098: glibc security and bug fix update (MODERATE)

около 13 лет назад
suse-cvrf логотип
SUSE-SU-2015:0551-1

Security update for glibc

почти 12 лет назад

Уязвимостей на страницу