Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu glibc 2.12.2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-4412
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and previous versions allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overf...
Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.15Gnu Glibc 2.14.1Gnu Glibc 2.11.1Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 2.0.6Gnu Glibc 2.0.5Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.1.1Gnu Glibc 2.1Gnu Glibc 2.0Gnu Glibc 2.14Gnu Glibc 2.13
NA
CVE-2012-4424
Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and previous versions allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure...
Gnu Glibc 2.15Gnu Glibc 2.14.1Gnu Glibc 2.14Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 2.0.6Gnu Glibc 2.0.5Gnu Glibc 2.13Gnu Glibc 2.12.2Gnu Glibc 2.1.9Gnu Glibc 2.1.3Gnu Glibc 2.0.4Gnu Glibc 2.0.3Gnu Glibc 2.12.1Gnu Glibc 2.11.3Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.2
NA
CVE-2011-1071
The GNU C Library (aka glibc or libc6) prior to 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent malicious users to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extensi...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
NA
CVE-2013-4788
The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and previous versions, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it easier for context-dependent malicious users to control execution flow ...
Gnu GlibcGnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.1.1.6Gnu Glibc 2.1.1Gnu Glibc 2.0.1Gnu Glibc 2.0Gnu Glibc 2.14.1Gnu Glibc 2.14Gnu Glibc 2.10.1Gnu Glibc 2.1.9Gnu Glibc 2.0.5Gnu Glibc 2.0.4Gnu Glibc 2.13Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.1.3Gnu Glibc 2.1.2Gnu Glibc 2.0.3Gnu Glibc 2.0.2Gnu Glibc 2.16Gnu Glibc 2.15
NA
CVE-2013-2207
pt_chown in GNU C Library (aka glibc or libc6) prior to 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
Gnu Glibc 2.14Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.2Gnu Glibc 2.11.1Gnu Glibc 2.1.1Gnu Glibc 2.1Gnu Glibc 2.0Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.11.3Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.13Gnu Glibc 2.1.9Gnu Glibc 2.1.3Gnu Glibc 2.0.4Gnu Glibc 2.0.3Gnu Glibc 2.15Gnu Glibc 2.14.1
NA
CVE-2010-4051
The regcomp implementation in the GNU C Library (aka glibc or libc6) up to and including 2.11.3, and 2.12.x up to and including 2.12.2, allows context-dependent malicious users to cause a denial of service (application crash) via a regular expression containing adjacent bounded r...
Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 1.07Gnu Glibc 2.12.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01Gnu Glibc 2.1Gnu Glibc 1.09.1Gnu Glibc 2.1.9Gnu Glibc 2.12.1Gnu Glibc 1.09Gnu Glibc 2.10Gnu Glibc 2.11.2Gnu Glibc 1.03Gnu Glibc 2.1.3.10Gnu Glibc 2.11.3
NA
CVE-2010-4052
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) up to and including 2.11.3, and 2.12.x up to and including 2.12.2, allows context-dependent malicious users to cause a denial of service (resource exhaustion) via a regular exp...
Gnu Glibc 1.00Gnu Glibc 1.01Gnu Glibc 1.07Gnu Glibc 1.06Gnu Glibc 2.1.3.10Gnu Glibc 2.1.9Gnu Glibc 2.11.3Gnu Glibc 2.12.2Gnu Glibc 1.09.1Gnu Glibc 1.09Gnu Glibc 1.08Gnu Glibc 2.1.2Gnu Glibc 2.1.3Gnu Glibc 2.10Gnu Glibc 2.10.1Gnu Glibc 1.05Gnu Glibc 1.04Gnu Glibc 2.1Gnu Glibc 2.10.2Gnu Glibc 2.12.0Gnu Glibc 2.12.1Gnu Glibc 2.11
NA
CVE-2011-1659
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and previous versions allows context-dependent malicious users to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argumen...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu GlibcGnu Glibc 2.1.1.6Gnu Glibc 1.04
NA
CVE-2011-1089
The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and previous versions does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from...
Gnu Glibc 1.03Gnu Glibc 1.02Gnu Glibc 1.09Gnu Glibc 1.08Gnu Glibc 2.0.5Gnu Glibc 2.0.4Gnu Glibc 2.0.3Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.1.2Gnu Glibc 2.1.3Gnu Glibc 2.1.3.10Gnu Glibc 2.1.9Gnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.12.2Gnu GlibcGnu Glibc 2.3.5Gnu Glibc 2.8Gnu Glibc 2.9Gnu Glibc 2.10Gnu Glibc 2.2.4
NA
CVE-2011-1658
ld.so in the GNU C Library (aka glibc or libc6) 2.13 and previous versions expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or...
Gnu Glibc 1.00Gnu Glibc 1.08Gnu Glibc 1.07Gnu Glibc 2.10.1Gnu Glibc 2.1Gnu Glibc 2.0.1Gnu Glibc 2.0Gnu Glibc 2.3.1Gnu Glibc 2.3.10Gnu Glibc 2.2Gnu Glibc 2.2.1Gnu Glibc 2.5Gnu Glibc 2.5.1Gnu GlibcGnu Glibc 1.04Gnu Glibc 1.03Gnu Glibc 2.3.5Gnu Glibc 2.8Gnu Glibc 2.0.5Gnu Glibc 2.0.4Gnu Glibc 2.2.3Gnu Glibc 2.2.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook