Published: 02/05/2013 Updated: 13/02/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent malicious users to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc 2.14

Multiple vulnerabilities were discovered and fixed in the GNU C Library ...

Synopsis Moderate: glibc security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated glibc packages that fix one security issue and three bugs are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact A ...

Synopsis Important: rhev-hypervisor6 security and bug fix update Type/Severity Security Advisory: Important Topic An updated rhev-hypervisor6 package that fixes three security issues andone bug is now availableThe Red Hat Security Response Team has rated this update as havingimportant security impact Comm ...

Synopsis Moderate: glibc security update Type/Severity Security Advisory: Moderate Topic Updated glibc packages that fix one security issue are now available forRed Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact A Common Vulnerability Scori ...

An integer overflow flaw was found in the implementation of the printf functions family This could allow an attacker to bypass FORTIFY_SOURCE protections and execute arbitrary code using a format string flaw in an application, even though these protections are expected to limit the impact of such flaws to an application abort (CVE-2012-0864) ...

sudo versions 180 through 183p1 sudo_debug root exploit with glibc FORTIFY_SOURCE bypass ...

CWE-189 http://www.phrack.org/issues.html?issue=67&id=9#article http://rhn.redhat.com/errata/RHSA-2012-0531.html http://sourceware.org/ml/libc-alpha/2012-02/msg00023.html http://rhn.redhat.com/errata/RHSA-2012-0488.html http://rhn.redhat.com/errata/RHSA-2012-0397.html http://www.securityfocus.com/bid/52201 https://bugzilla.redhat.com/show_bug.cgi?id=794766 http://rhn.redhat.com/errata/RHSA-2012-0393.html http://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=7c1f4834d398163d1ac8101e35e9c36fc3176e6e https://nvd.nist.gov https://usn.ubuntu.com/1396-1/

CVE-2012-0864

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect