CVE-2012-3480

MEDIUM
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html

http://osvdb.org/84710

http://rhn.redhat.com/errata/RHSA-2012-1207.html

http://rhn.redhat.com/errata/RHSA-2012-1208.html

http://rhn.redhat.com/errata/RHSA-2012-1262.html

http://rhn.redhat.com/errata/RHSA-2012-1325.html

http://secunia.com/advisories/50201

http://secunia.com/advisories/50422

http://sourceware.org/bugzilla/show_bug.cgi?id=14459

http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html

http://www.openwall.com/lists/oss-security/2012/08/13/4

http://www.openwall.com/lists/oss-security/2012/08/13/6

http://www.securityfocus.com/bid/54982

http://www.securitytracker.com/id?1027374

http://www.ubuntu.com/usn/USN-1589-1

https://security.gentoo.org/glsa/201503-04

Details

Source: MITRE

Published: 2012-08-25

Updated: 2017-07-01

Type: CWE-189

Risk Information

CVSS v2

Base Score: 4.6

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 3.9

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:gnu:glibc:2.16:*:*:*:*:*:*:*

Tenable Plugins

View all (27 total)

IDNameProductFamilySeverity
83597SUSE SLES10 Security Update : glibc (SUSE-SU-2013:1287-1)NessusSuSE Local Security Checks
medium
83594SUSE SLES11 Security Update : glibc (SUSE-SU-2013:1251-1)NessusSuSE Local Security Checks
medium
83570SUSE SLED10 / SLES10 Security Update : glibc (SUSE-SU-2012:1667-1)NessusSuSE Local Security Checks
medium
82149Debian DLA-165-1 : eglibc security updateNessusDebian Local Security Checks
high
81689GLSA-201503-04 : GNU C Library: Multiple vulnerabilities (GHOST)NessusGentoo Local Security Checks
high
78935RHEL 6 : rhev-hypervisor6 (RHSA-2012:1325)NessusRed Hat Local Security Checks
high
78933RHEL 5 : rhev-hypervisor5 (RHSA-2012:1262)NessusRed Hat Local Security Checks
high
70886ESXi 5.1 < Build 1063671 Multiple Vulnerabilities (remote check)NessusMisc.
medium
70885ESXi 5.0 < Build 912577 Multiple Vulnerabilities (remote check)NessusMisc.
high
69610Amazon Linux AMI : glibc (ALAS-2012-120)NessusAmazon Linux Local Security Checks
medium
68606Oracle Linux 6 : glibc (ELSA-2012-1208)NessusOracle Linux Local Security Checks
medium
68605Oracle Linux 5 : glibc (ELSA-2012-1207)NessusOracle Linux Local Security Checks
medium
64150SuSE 11.2 Security Update : glibc (SAT Patch Number 7110)NessusSuSE Local Security Checks
medium
63332VMSA-2012-0018 : VMware security updates for vCSA and ESXiNessusVMware ESX Local Security Checks
high
63295SuSE 10 Security Update : glibc (ZYPP Patch Number 8387)NessusSuSE Local Security Checks
medium
63285Ubuntu 8.04 LTS : glibc regression (USN-1589-2)NessusUbuntu Local Security Checks
medium
62388Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : eglibc, glibc vulnerabilities (USN-1589-1)NessusUbuntu Local Security Checks
medium
62130Fedora 18 : glibc-2.16-8.fc18 (2012-11963)NessusFedora Local Security Checks
medium
61748Slackware 13.1 / 13.37 / current : glibc (SSA:2012-244-01)NessusSlackware Local Security Checks
medium
61720CentOS 6 : glibc (CESA-2012:1208)NessusCentOS Local Security Checks
medium
61693Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20120827)NessusScientific Linux Local Security Checks
medium
61692Scientific Linux Security Update : glibc on SL5.x i386/x86_64 (20120827)NessusScientific Linux Local Security Checks
medium
61691RHEL 6 : glibc (RHSA-2012:1208)NessusRed Hat Local Security Checks
medium
61690RHEL 5 : glibc (RHSA-2012:1207)NessusRed Hat Local Security Checks
medium
61686Fedora 16 : glibc-2.14.90-24.fc16.9 (2012-11928)NessusFedora Local Security Checks
medium
61683CentOS 5 : glibc (CESA-2012:1207)NessusCentOS Local Security Checks
medium
61584Fedora 17 : glibc-2.15-56.fc17 (2012-11927)NessusFedora Local Security Checks
medium