Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu glibc 2.12.1 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2012-4412
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and previous versions allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overf...
Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.15Gnu Glibc 2.14.1Gnu Glibc 2.11.1Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 2.0.6Gnu Glibc 2.0.5Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.1.1Gnu Glibc 2.1Gnu Glibc 2.0Gnu Glibc 2.14Gnu Glibc 2.13
7.2
CVSSv2
CVE-2010-3856
ld.so in the GNU C Library (aka glibc or libc6) prior to 2.11.3, and 2.12.x prior to 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging ...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
6.9
CVSSv2
CVE-2010-3847
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) up to and including 2.11.2, and 2.12.x up to and including 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
6.8
CVSSv2
CVE-2011-2702
Integer signedness error in Glibc prior to 2.13 and eglibc prior to 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent malicious users to execute arbitrary code via a negative length parameter to (1) memcpy-ssse3-rep.S, (2) me...
Gnu Glibc 2.12.1Gnu GlibcGnu Glibc 2.12Gnu Eglibc
6.2
CVSSv2
CVE-2011-1095
locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) prior to 2.13 does not quote its output, which might allow local users to gain privileges via a crafted localization environment variable, in conjunction with a program that executes a script that uses t...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
5.1
CVSSv2
CVE-2012-4424
Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and previous versions allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure...
Gnu Glibc 2.15Gnu Glibc 2.14.1Gnu Glibc 2.14Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 2.0.6Gnu Glibc 2.0.5Gnu Glibc 2.13Gnu Glibc 2.12.2Gnu Glibc 2.1.9Gnu Glibc 2.1.3Gnu Glibc 2.0.4Gnu Glibc 2.0.3Gnu Glibc 2.12.1Gnu Glibc 2.11.3Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.2
5.1
CVSSv2
CVE-2013-4788
The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and previous versions, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it easier for context-dependent malicious users to control execution flow ...
Gnu GlibcGnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.1.1.6Gnu Glibc 2.1.1Gnu Glibc 2.0.1Gnu Glibc 2.0Gnu Glibc 2.14.1Gnu Glibc 2.14Gnu Glibc 2.10.1Gnu Glibc 2.1.9Gnu Glibc 2.0.5Gnu Glibc 2.0.4Gnu Glibc 2.13Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.1.3Gnu Glibc 2.1.2Gnu Glibc 2.0.3Gnu Glibc 2.0.2Gnu Glibc 2.16Gnu Glibc 2.15
5
CVSSv2
CVE-2011-1659
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and previous versions allows context-dependent malicious users to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argumen...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu GlibcGnu Glibc 2.1.1.6Gnu Glibc 1.04
5
CVSSv2
CVE-2010-4051
The regcomp implementation in the GNU C Library (aka glibc or libc6) up to and including 2.11.3, and 2.12.x up to and including 2.12.2, allows context-dependent malicious users to cause a denial of service (application crash) via a regular expression containing adjacent bounded r...
Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 1.07Gnu Glibc 2.12.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01Gnu Glibc 2.1Gnu Glibc 1.09.1Gnu Glibc 2.1.9Gnu Glibc 2.12.1Gnu Glibc 1.09Gnu Glibc 2.10Gnu Glibc 2.11.2Gnu Glibc 1.03Gnu Glibc 2.1.3.10Gnu Glibc 2.11.3
5
CVSSv2
CVE-2010-4052
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) up to and including 2.11.3, and 2.12.x up to and including 2.12.2, allows context-dependent malicious users to cause a denial of service (resource exhaustion) via a regular exp...
Gnu Glibc 1.00Gnu Glibc 1.01Gnu Glibc 1.07Gnu Glibc 1.06Gnu Glibc 2.1.3.10Gnu Glibc 2.1.9Gnu Glibc 2.11.3Gnu Glibc 2.12.2Gnu Glibc 1.09.1Gnu Glibc 1.09Gnu Glibc 1.08Gnu Glibc 2.1.2Gnu Glibc 2.1.3Gnu Glibc 2.10Gnu Glibc 2.10.1Gnu Glibc 1.05Gnu Glibc 1.04Gnu Glibc 2.1Gnu Glibc 2.10.2Gnu Glibc 2.12.0Gnu Glibc 2.12.1Gnu Glibc 2.11
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook