Vulnerability in Gnu Glibc
CVE-2012-0864
Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.
EPSS: 0.027 (84.5th percentile) — read the EPSS interpretation.
Affected products
- Gnu Glibc — versions 2.14
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (Exploit, vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_MISC)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Exploit)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (Exploit, x_refsource_MISC)