Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2012-3480 (GCVE-0-2012-3480)
Vulnerability from cvelistv5 – Published: 2012-08-25 10:00 – Updated: 2024-08-06 20:05
VLAI?
EPSS
Summary
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
16 references
Date Public ?
2012-08-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T20:05:12.639Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "[oss-security] 20120813 CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/4"
},
{
"name": "FEDORA-2012-11927",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html"
},
{
"name": "84710",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/84710"
},
{
"name": "54982",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/54982"
},
{
"name": "[oss-security] 20120813 Re: CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/6"
},
{
"name": "RHSA-2012:1325",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"name": "[libc-alpha] 20120812 Fix strtod integer/buffer overflow (bug 14459)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=14459"
},
{
"name": "RHSA-2012:1262",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"name": "GLSA-201503-04",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201503-04"
},
{
"name": "RHSA-2012:1207",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1207.html"
},
{
"name": "1027374",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1027374"
},
{
"name": "USN-1589-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-1589-1"
},
{
"name": "50201",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/50201"
},
{
"name": "50422",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/50422"
},
{
"name": "RHSA-2012:1208",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1208.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2012-08-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-06-30T16:57:01.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "[oss-security] 20120813 CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/4"
},
{
"name": "FEDORA-2012-11927",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html"
},
{
"name": "84710",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/84710"
},
{
"name": "54982",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/54982"
},
{
"name": "[oss-security] 20120813 Re: CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/6"
},
{
"name": "RHSA-2012:1325",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"name": "[libc-alpha] 20120812 Fix strtod integer/buffer overflow (bug 14459)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=14459"
},
{
"name": "RHSA-2012:1262",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"name": "GLSA-201503-04",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201503-04"
},
{
"name": "RHSA-2012:1207",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1207.html"
},
{
"name": "1027374",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1027374"
},
{
"name": "USN-1589-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-1589-1"
},
{
"name": "50201",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/50201"
},
{
"name": "50422",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/50422"
},
{
"name": "RHSA-2012:1208",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1208.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2012-3480",
"datePublished": "2012-08-25T10:00:00.000Z",
"dateReserved": "2012-06-14T00:00:00.000Z",
"dateUpdated": "2024-08-06T20:05:12.639Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2012-3480",
"date": "2026-05-21",
"epss": "0.00291",
"percentile": "0.52547"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:glibc:2.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CA4CFA8E-9892-4DDA-9DB2-581711E974A1\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \\\"related functions\\\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.\"}, {\"lang\": \"es\", \"value\": \"M\\u00faltiples desbordamientos de entero en (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, y otras \\\"funciones relacionadas\\\" no especificadas en stdlib en GNU C Library (tambi\\u00e9n conocido como glibc o libc6) v2.16 permite a usuarios locales provocar una denegaci\\u00f3n de servicio (ca\\u00edda de aplicaci\\u00f3n) y posiblemente ejecutar c\\u00f3digo arbitrario a trav\\u00e9s de una cadena larga, lo que provoca un desbordamiento de b\\u00fafer basado en pila.\"}]",
"id": "CVE-2012-3480",
"lastModified": "2024-11-21T01:40:57.813",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 4.6, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 3.9, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2012-08-25T10:29:51.770",
"references": "[{\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://osvdb.org/84710\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1207.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1208.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1262.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1325.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/50201\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/50422\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://sourceware.org/bugzilla/show_bug.cgi?id=14459\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/08/13/4\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/08/13/6\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/54982\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securitytracker.com/id?1027374\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-1589-1\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://security.gentoo.org/glsa/201503-04\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://osvdb.org/84710\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1207.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1208.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1262.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1325.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/50201\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/50422\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://sourceware.org/bugzilla/show_bug.cgi?id=14459\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/08/13/4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/08/13/6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/54982\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id?1027374\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-1589-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/201503-04\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-189\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2012-3480\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2012-08-25T10:29:51.770\",\"lastModified\":\"2026-04-29T01:13:23.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \\\"related functions\\\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples desbordamientos de entero en (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, y otras \\\"funciones relacionadas\\\" no especificadas en stdlib en GNU C Library (tambi\u00e9n conocido como glibc o libc6) v2.16 permite a usuarios locales provocar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) y posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de una cadena larga, lo que provoca un desbordamiento de b\u00fafer basado en pila.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":4.6,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-189\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:glibc:2.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA4CFA8E-9892-4DDA-9DB2-581711E974A1\"}]}]}],\"references\":[{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://osvdb.org/84710\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1207.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1208.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1262.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1325.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/50201\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/50422\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://sourceware.org/bugzilla/show_bug.cgi?id=14459\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/08/13/4\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/08/13/6\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/54982\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securitytracker.com/id?1027374\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1589-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://security.gentoo.org/glsa/201503-04\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/84710\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1207.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1208.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1262.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1325.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/50201\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/50422\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sourceware.org/bugzilla/show_bug.cgi?id=14459\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/08/13/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/08/13/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/54982\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id?1027374\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1589-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201503-04\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
CERTA-2012-AVI-734
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été corrigée dans les produits Avaya. Elle concerne des débordements d'entiers dans les fonctions strtod(), strtof() et strtold() pouvant mener à des débordement de tampon en mémoire. Un utilisateur malintentionné peut ainsi exécuter du code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| AVAYA | N/A | Avaya Aura Application Server 5300 versions 2.x et 3.x | ||
| AVAYA | N/A | Avaya Aura Messaging version 6.x | ||
| AVAYA | N/A | Avaya Aura Application Enablement Services versions 5.x et 6.x | ||
| AVAYA | N/A | Avaya IP Office Application Server version 8.x | ||
| AVAYA | N/A | Avaya Proactive Contact version 5.x | ||
| AVAYA | N/A | Avaya Communication Server 1000 versions 6.x et 7.x | ||
| AVAYA | N/A | Avaya Aura Session Manager versions 1.x, 5.x, 6.1.x, 6.2 à 6.2.2 | ||
| AVAYA | N/A | Avaya Aura Communication Manager version 6.x | ||
| AVAYA | N/A | Avaya Voice Portal version 5.x | ||
| AVAYA | N/A | Avaya Aura Presence Services version 6.x | ||
| AVAYA | N/A | Avaya Aura System Manager versions 5.x, 6.1.x et 6.2.x | ||
| AVAYA | N/A | Avaya Aura System Platform versions 1.x et 6.x | ||
| AVAYA | N/A | Avaya one-X Client Enablement Services version 6.x | ||
| AVAYA | N/A | Avaya Aura Conferencing Standard Edition version 6.x | ||
| AVAYA | N/A | Avaya IQ version 5.x | ||
| AVAYA | N/A | Avaya Aura Communication Manager Utility Services version 6.x |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Avaya Aura Application Server 5300 versions 2.x et 3.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Messaging version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Application Enablement Services versions 5.x et 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya IP Office Application Server version 8.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Proactive Contact version 5.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Communication Server 1000 versions 6.x et 7.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Session Manager versions 1.x, 5.x, 6.1.x, 6.2 \u00e0 6.2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Communication Manager version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Voice Portal version 5.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Presence Services version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura System Manager versions 5.x, 6.1.x et 6.2.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura System Platform versions 1.x et 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya one-X Client Enablement Services version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Conferencing Standard Edition version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya IQ version 5.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Communication Manager Utility Services version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2012-3480",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3480"
}
],
"links": [],
"reference": "CERTA-2012-AVI-734",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2012-12-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans les produits \u003cspan\nclass=\"textit\"\u003eAvaya\u003c/span\u003e. Elle concerne des d\u00e9bordements d\u0027entiers\ndans les fonctions \u003cspan class=\"textit\"\u003estrtod()\u003c/span\u003e, \u003cspan\nclass=\"textit\"\u003estrtof()\u003c/span\u003e et \u003cspan class=\"textit\"\u003estrtold()\u003c/span\u003e\npouvant mener \u00e0 des d\u00e9bordement de tampon en m\u00e9moire. Un utilisateur\nmalintentionn\u00e9 peut ainsi ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Avaya",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Avaya 100167371 du 10 d\u00e9cembre 2012",
"url": "https://downloads.avaya.com/css/P8/documents/100167371"
}
]
}
CERTA-2012-AVI-759
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans VMware vCenter Server Appliance et VMware ESXi. Elles concernent des téléchargement de fichiers arbitraires.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "VMware ESXi 5.0",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 4.0",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 4.1",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server Appliance 5.1",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server Appliance 5.0",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 5.1",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2011-4609",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4609"
},
{
"name": "CVE-2009-5064",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-5064"
},
{
"name": "CVE-2009-5029",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-5029"
},
{
"name": "CVE-2012-3404",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3404"
},
{
"name": "CVE-2012-3406",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3406"
},
{
"name": "CVE-2010-0830",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0830"
},
{
"name": "CVE-2012-0864",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0864"
},
{
"name": "CVE-2012-3405",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3405"
},
{
"name": "CVE-2012-3480",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3480"
},
{
"name": "CVE-2011-1089",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1089"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2012-0018 du 20 d\u00e9cembre 2012 :",
"url": "http://www.vmware.com/security/advisories/VMSA-2012-0018.html"
}
],
"reference": "CERTA-2012-AVI-759",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2012-12-21T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eVMware vCenter Server Appliance\u003c/span\u003e et \u003cspan\nclass=\"textit\"\u003eVMware ESXi\u003c/span\u003e. Elles concernent des t\u00e9l\u00e9chargement\nde fichiers arbitraires.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans VMware",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMSA-2012-0018 du 20 d\u00e9cembre 2012",
"url": null
}
]
}
CERTA-2013-AVI-146
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans les produits VMware. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | N/A | VMware ESX version 4.0 | ||
| VMware | N/A | VMware ESX version 4.1 | ||
| VMware | vCenter Server | VMware vCenter Server version 5.1 | ||
| VMware | ESXi | VMware ESXi version 3.5 | ||
| VMware | ESXi | VMware ESXi version 5.0 | ||
| VMware | ESXi | VMware ESXi version 5.1 | ||
| VMware | N/A | VMware ESX version 3.5 | ||
| VMware | ESXi | VMware ESXi version 4.1 | ||
| VMware | ESXi | VMware ESXi version 4.0 | ||
| VMware | vCenter Server | VMware vCenter Server version 5.0 | ||
| VMware | N/A | VMware VirtualCenter version 4.0 | ||
| VMware | vCenter Server | VMware vCenter Server version 4.0 |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "VMware ESX version 4.0",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX version 4.1",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server version 5.1",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 3.5",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 5.0",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 5.1",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX version 3.5",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 4.1",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 4.0",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server version 5.0",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware VirtualCenter version 4.0",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server version 4.0",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2011-4609",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4609"
},
{
"name": "CVE-2012-4244",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-4244"
},
{
"name": "CVE-2012-2110",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2110"
},
{
"name": "CVE-2009-5064",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-5064"
},
{
"name": "CVE-2009-5029",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-5029"
},
{
"name": "CVE-2011-3970",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3970"
},
{
"name": "CVE-2012-2871",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2871"
},
{
"name": "CVE-2012-3404",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3404"
},
{
"name": "CVE-2012-2870",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2870"
},
{
"name": "CVE-2013-1405",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1405"
},
{
"name": "CVE-2012-6324",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6324"
},
{
"name": "CVE-2011-3102",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3102"
},
{
"name": "CVE-2012-3406",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3406"
},
{
"name": "CVE-2010-0830",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0830"
},
{
"name": "CVE-2012-0864",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0864"
},
{
"name": "CVE-2012-6326",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6326"
},
{
"name": "CVE-2013-1659",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1659"
},
{
"name": "CVE-2012-2807",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2807"
},
{
"name": "CVE-2012-3405",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3405"
},
{
"name": "CVE-2012-3480",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3480"
},
{
"name": "CVE-2012-6325",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6325"
},
{
"name": "CVE-2011-1202",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1202"
},
{
"name": "CVE-2011-1089",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1089"
},
{
"name": "CVE-2012-2825",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2825"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0003 VMSA-2012-0018 VMSA-2013-0001 du 21 f\u00e9vrier 2013",
"url": "http://www.vmware.com/security/advisories/VMSA-2012-0018.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0003 VMSA-2012-0018 VMSA-2013-0001 du 21 f\u00e9vrier 2013",
"url": "http://www.vmware.com/security/advisories/VMSA-2013-0001.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0003 VMSA-2012-0018 VMSA-2013-0001 du 21 f\u00e9vrier 2013",
"url": "http://www.vmware.com/security/advisories/VMSA-2013-0003.html"
}
],
"reference": "CERTA-2013-AVI-146",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2013-02-22T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eVMware\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un contournement\nde la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2012-0018 du 21 f\u00e9vrier 2013",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0003 du 21 f\u00e9vrier 2013",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0001 du 21 f\u00e9vrier 2013",
"url": null
}
]
}
CERTA-2012-AVI-734
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été corrigée dans les produits Avaya. Elle concerne des débordements d'entiers dans les fonctions strtod(), strtof() et strtold() pouvant mener à des débordement de tampon en mémoire. Un utilisateur malintentionné peut ainsi exécuter du code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| AVAYA | N/A | Avaya Aura Application Server 5300 versions 2.x et 3.x | ||
| AVAYA | N/A | Avaya Aura Messaging version 6.x | ||
| AVAYA | N/A | Avaya Aura Application Enablement Services versions 5.x et 6.x | ||
| AVAYA | N/A | Avaya IP Office Application Server version 8.x | ||
| AVAYA | N/A | Avaya Proactive Contact version 5.x | ||
| AVAYA | N/A | Avaya Communication Server 1000 versions 6.x et 7.x | ||
| AVAYA | N/A | Avaya Aura Session Manager versions 1.x, 5.x, 6.1.x, 6.2 à 6.2.2 | ||
| AVAYA | N/A | Avaya Aura Communication Manager version 6.x | ||
| AVAYA | N/A | Avaya Voice Portal version 5.x | ||
| AVAYA | N/A | Avaya Aura Presence Services version 6.x | ||
| AVAYA | N/A | Avaya Aura System Manager versions 5.x, 6.1.x et 6.2.x | ||
| AVAYA | N/A | Avaya Aura System Platform versions 1.x et 6.x | ||
| AVAYA | N/A | Avaya one-X Client Enablement Services version 6.x | ||
| AVAYA | N/A | Avaya Aura Conferencing Standard Edition version 6.x | ||
| AVAYA | N/A | Avaya IQ version 5.x | ||
| AVAYA | N/A | Avaya Aura Communication Manager Utility Services version 6.x |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Avaya Aura Application Server 5300 versions 2.x et 3.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Messaging version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Application Enablement Services versions 5.x et 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya IP Office Application Server version 8.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Proactive Contact version 5.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Communication Server 1000 versions 6.x et 7.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Session Manager versions 1.x, 5.x, 6.1.x, 6.2 \u00e0 6.2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Communication Manager version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Voice Portal version 5.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Presence Services version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura System Manager versions 5.x, 6.1.x et 6.2.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura System Platform versions 1.x et 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya one-X Client Enablement Services version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Conferencing Standard Edition version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya IQ version 5.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
},
{
"description": "Avaya Aura Communication Manager Utility Services version 6.x",
"product": {
"name": "N/A",
"vendor": {
"name": "AVAYA",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2012-3480",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3480"
}
],
"links": [],
"reference": "CERTA-2012-AVI-734",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2012-12-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans les produits \u003cspan\nclass=\"textit\"\u003eAvaya\u003c/span\u003e. Elle concerne des d\u00e9bordements d\u0027entiers\ndans les fonctions \u003cspan class=\"textit\"\u003estrtod()\u003c/span\u003e, \u003cspan\nclass=\"textit\"\u003estrtof()\u003c/span\u003e et \u003cspan class=\"textit\"\u003estrtold()\u003c/span\u003e\npouvant mener \u00e0 des d\u00e9bordement de tampon en m\u00e9moire. Un utilisateur\nmalintentionn\u00e9 peut ainsi ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Avaya",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Avaya 100167371 du 10 d\u00e9cembre 2012",
"url": "https://downloads.avaya.com/css/P8/documents/100167371"
}
]
}
CERTA-2012-AVI-759
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans VMware vCenter Server Appliance et VMware ESXi. Elles concernent des téléchargement de fichiers arbitraires.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "VMware ESXi 5.0",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 4.0",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 4.1",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server Appliance 5.1",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server Appliance 5.0",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 5.1",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2011-4609",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4609"
},
{
"name": "CVE-2009-5064",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-5064"
},
{
"name": "CVE-2009-5029",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-5029"
},
{
"name": "CVE-2012-3404",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3404"
},
{
"name": "CVE-2012-3406",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3406"
},
{
"name": "CVE-2010-0830",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0830"
},
{
"name": "CVE-2012-0864",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0864"
},
{
"name": "CVE-2012-3405",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3405"
},
{
"name": "CVE-2012-3480",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3480"
},
{
"name": "CVE-2011-1089",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1089"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2012-0018 du 20 d\u00e9cembre 2012 :",
"url": "http://www.vmware.com/security/advisories/VMSA-2012-0018.html"
}
],
"reference": "CERTA-2012-AVI-759",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2012-12-21T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eVMware vCenter Server Appliance\u003c/span\u003e et \u003cspan\nclass=\"textit\"\u003eVMware ESXi\u003c/span\u003e. Elles concernent des t\u00e9l\u00e9chargement\nde fichiers arbitraires.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans VMware",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMSA-2012-0018 du 20 d\u00e9cembre 2012",
"url": null
}
]
}
CERTA-2013-AVI-146
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans les produits VMware. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | N/A | VMware ESX version 4.0 | ||
| VMware | N/A | VMware ESX version 4.1 | ||
| VMware | vCenter Server | VMware vCenter Server version 5.1 | ||
| VMware | ESXi | VMware ESXi version 3.5 | ||
| VMware | ESXi | VMware ESXi version 5.0 | ||
| VMware | ESXi | VMware ESXi version 5.1 | ||
| VMware | N/A | VMware ESX version 3.5 | ||
| VMware | ESXi | VMware ESXi version 4.1 | ||
| VMware | ESXi | VMware ESXi version 4.0 | ||
| VMware | vCenter Server | VMware vCenter Server version 5.0 | ||
| VMware | N/A | VMware VirtualCenter version 4.0 | ||
| VMware | vCenter Server | VMware vCenter Server version 4.0 |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "VMware ESX version 4.0",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX version 4.1",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server version 5.1",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 3.5",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 5.0",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 5.1",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX version 3.5",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 4.1",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi version 4.0",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server version 5.0",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware VirtualCenter version 4.0",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server version 4.0",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2011-4609",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4609"
},
{
"name": "CVE-2012-4244",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-4244"
},
{
"name": "CVE-2012-2110",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2110"
},
{
"name": "CVE-2009-5064",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-5064"
},
{
"name": "CVE-2009-5029",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-5029"
},
{
"name": "CVE-2011-3970",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3970"
},
{
"name": "CVE-2012-2871",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2871"
},
{
"name": "CVE-2012-3404",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3404"
},
{
"name": "CVE-2012-2870",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2870"
},
{
"name": "CVE-2013-1405",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1405"
},
{
"name": "CVE-2012-6324",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6324"
},
{
"name": "CVE-2011-3102",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3102"
},
{
"name": "CVE-2012-3406",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3406"
},
{
"name": "CVE-2010-0830",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0830"
},
{
"name": "CVE-2012-0864",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0864"
},
{
"name": "CVE-2012-6326",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6326"
},
{
"name": "CVE-2013-1659",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1659"
},
{
"name": "CVE-2012-2807",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2807"
},
{
"name": "CVE-2012-3405",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3405"
},
{
"name": "CVE-2012-3480",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3480"
},
{
"name": "CVE-2012-6325",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6325"
},
{
"name": "CVE-2011-1202",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1202"
},
{
"name": "CVE-2011-1089",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1089"
},
{
"name": "CVE-2012-2825",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2825"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0003 VMSA-2012-0018 VMSA-2013-0001 du 21 f\u00e9vrier 2013",
"url": "http://www.vmware.com/security/advisories/VMSA-2012-0018.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0003 VMSA-2012-0018 VMSA-2013-0001 du 21 f\u00e9vrier 2013",
"url": "http://www.vmware.com/security/advisories/VMSA-2013-0001.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0003 VMSA-2012-0018 VMSA-2013-0001 du 21 f\u00e9vrier 2013",
"url": "http://www.vmware.com/security/advisories/VMSA-2013-0003.html"
}
],
"reference": "CERTA-2013-AVI-146",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2013-02-22T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eVMware\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un contournement\nde la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2012-0018 du 21 f\u00e9vrier 2013",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0003 du 21 f\u00e9vrier 2013",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2013-0001 du 21 f\u00e9vrier 2013",
"url": null
}
]
}
FKIE_CVE-2012-3480
Vulnerability from fkie_nvd - Published: 2012-08-25 10:29 - Updated: 2026-04-29 01:13
Severity ?
Summary
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
References
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:glibc:2.16:*:*:*:*:*:*:*",
"matchCriteriaId": "CA4CFA8E-9892-4DDA-9DB2-581711E974A1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow."
},
{
"lang": "es",
"value": "M\u00faltiples desbordamientos de entero en (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, y otras \"funciones relacionadas\" no especificadas en stdlib en GNU C Library (tambi\u00e9n conocido como glibc o libc6) v2.16 permite a usuarios locales provocar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) y posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de una cadena larga, lo que provoca un desbordamiento de b\u00fafer basado en pila."
}
],
"id": "CVE-2012-3480",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2012-08-25T10:29:51.770",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html"
},
{
"source": "secalert@redhat.com",
"url": "http://osvdb.org/84710"
},
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1207.html"
},
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1208.html"
},
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/50201"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/50422"
},
{
"source": "secalert@redhat.com",
"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=14459"
},
{
"source": "secalert@redhat.com",
"url": "http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/4"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/6"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/54982"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securitytracker.com/id?1027374"
},
{
"source": "secalert@redhat.com",
"url": "http://www.ubuntu.com/usn/USN-1589-1"
},
{
"source": "secalert@redhat.com",
"url": "https://security.gentoo.org/glsa/201503-04"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/84710"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1207.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1208.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/50201"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/50422"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=14459"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/4"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/6"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/54982"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id?1027374"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.ubuntu.com/usn/USN-1589-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201503-04"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-189"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-MCH7-W8FJ-4PC4
Vulnerability from github – Published: 2022-05-17 02:39 – Updated: 2022-05-17 02:39
VLAI?
Details
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
{
"affected": [],
"aliases": [
"CVE-2012-3480"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2012-08-25T10:29:00Z",
"severity": "MODERATE"
},
"details": "Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.",
"id": "GHSA-mch7-w8fj-4pc4",
"modified": "2022-05-17T02:39:19Z",
"published": "2022-05-17T02:39:19Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3480"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1207"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1208"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1262"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1325"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2012-3480"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847715"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201503-04"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html"
},
{
"type": "WEB",
"url": "http://osvdb.org/84710"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1207.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1208.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50201"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50422"
},
{
"type": "WEB",
"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=14459"
},
{
"type": "WEB",
"url": "http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/4"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/6"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/54982"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1027374"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-1589-1"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2012-3480
Vulnerability from gsd - Updated: 2023-12-13 01:20Details
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2012-3480",
"description": "Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.",
"id": "GSD-2012-3480",
"references": [
"https://www.suse.com/security/cve/CVE-2012-3480.html",
"https://access.redhat.com/errata/RHSA-2012:1325",
"https://access.redhat.com/errata/RHSA-2012:1262",
"https://access.redhat.com/errata/RHSA-2012:1208",
"https://access.redhat.com/errata/RHSA-2012:1207",
"https://alas.aws.amazon.com/cve/html/CVE-2012-3480.html",
"https://linux.oracle.com/cve/CVE-2012-3480.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2012-3480"
],
"details": "Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.",
"id": "GSD-2012-3480",
"modified": "2023-12-13T01:20:21.359988Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-3480",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.ubuntu.com/usn/USN-1589-1",
"refsource": "MISC",
"url": "http://www.ubuntu.com/usn/USN-1589-1"
},
{
"name": "https://security.gentoo.org/glsa/201503-04",
"refsource": "MISC",
"url": "https://security.gentoo.org/glsa/201503-04"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1262.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1325.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html"
},
{
"name": "http://osvdb.org/84710",
"refsource": "MISC",
"url": "http://osvdb.org/84710"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1207.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1207.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1208.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1208.html"
},
{
"name": "http://secunia.com/advisories/50201",
"refsource": "MISC",
"url": "http://secunia.com/advisories/50201"
},
{
"name": "http://secunia.com/advisories/50422",
"refsource": "MISC",
"url": "http://secunia.com/advisories/50422"
},
{
"name": "http://sourceware.org/bugzilla/show_bug.cgi?id=14459",
"refsource": "MISC",
"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=14459"
},
{
"name": "http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html",
"refsource": "MISC",
"url": "http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html"
},
{
"name": "http://www.openwall.com/lists/oss-security/2012/08/13/4",
"refsource": "MISC",
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/4"
},
{
"name": "http://www.openwall.com/lists/oss-security/2012/08/13/6",
"refsource": "MISC",
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/6"
},
{
"name": "http://www.securityfocus.com/bid/54982",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/54982"
},
{
"name": "http://www.securitytracker.com/id?1027374",
"refsource": "MISC",
"url": "http://www.securitytracker.com/id?1027374"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:gnu:glibc:2.16:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-3480"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-189"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "FEDORA-2012-11927",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html"
},
{
"name": "[libc-alpha] 20120812 Fix strtod integer/buffer overflow (bug 14459)",
"refsource": "MLIST",
"tags": [],
"url": "http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html"
},
{
"name": "50201",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/50201"
},
{
"name": "54982",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/54982"
},
{
"name": "[oss-security] 20120813 CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines",
"refsource": "MLIST",
"tags": [],
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/4"
},
{
"name": "http://sourceware.org/bugzilla/show_bug.cgi?id=14459",
"refsource": "MISC",
"tags": [],
"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=14459"
},
{
"name": "84710",
"refsource": "OSVDB",
"tags": [],
"url": "http://osvdb.org/84710"
},
{
"name": "[oss-security] 20120813 Re: CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines",
"refsource": "MLIST",
"tags": [],
"url": "http://www.openwall.com/lists/oss-security/2012/08/13/6"
},
{
"name": "RHSA-2012:1208",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1208.html"
},
{
"name": "RHSA-2012:1207",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1207.html"
},
{
"name": "RHSA-2012:1325",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"name": "RHSA-2012:1262",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"name": "50422",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/50422"
},
{
"name": "1027374",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id?1027374"
},
{
"name": "USN-1589-1",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/USN-1589-1"
},
{
"name": "GLSA-201503-04",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201503-04"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-02-13T03:28Z",
"publishedDate": "2012-08-25T10:29Z"
}
}
}
RHSA-2012:1207
Vulnerability from csaf_redhat - Published: 2012-08-27 12:58 - Updated: 2025-11-21 17:41Summary
Red Hat Security Advisory: glibc security and bug fix update
Severity
Moderate
Notes
Topic: Updated glibc packages that fix multiple security issues and one bug are
now available for Red Hat Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details: The glibc packages provide the standard C and standard math libraries used
by multiple programs on the system. Without these libraries, the Linux
system cannot function properly.
Multiple integer overflow flaws, leading to stack-based buffer overflows,
were found in glibc's functions for converting a string to a numeric
representation (strtod(), strtof(), and strtold()). If an application used
such a function on attacker controlled input, it could cause the
application to crash or, potentially, execute arbitrary code.
(CVE-2012-3480)
This update also fixes the following bug:
* Previously, logic errors in various mathematical functions, including
exp, exp2, expf, exp2f, pow, sin, tan, and rint, caused inconsistent
results when the functions were used with the non-default rounding mode.
This could also cause applications to crash in some cases. With this
update, the functions now give correct results across the four different
rounding modes. (BZ#839411)
All users of glibc are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
4.4 ()
Affected products
Fixed
90 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated glibc packages that fix multiple security issues and one bug are\nnow available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The glibc packages provide the standard C and standard math libraries used\nby multiple programs on the system. Without these libraries, the Linux\nsystem cannot function properly.\n\nMultiple integer overflow flaws, leading to stack-based buffer overflows,\nwere found in glibc\u0027s functions for converting a string to a numeric\nrepresentation (strtod(), strtof(), and strtold()). If an application used\nsuch a function on attacker controlled input, it could cause the\napplication to crash or, potentially, execute arbitrary code.\n(CVE-2012-3480)\n\nThis update also fixes the following bug:\n\n* Previously, logic errors in various mathematical functions, including\nexp, exp2, expf, exp2f, pow, sin, tan, and rint, caused inconsistent\nresults when the functions were used with the non-default rounding mode.\nThis could also cause applications to crash in some cases. With this\nupdate, the functions now give correct results across the four different\nrounding modes. (BZ#839411)\n\nAll users of glibc are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:1207",
"url": "https://access.redhat.com/errata/RHSA-2012:1207"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "847715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847715"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1207.json"
}
],
"title": "Red Hat Security Advisory: glibc security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T17:41:08+00:00",
"generator": {
"date": "2025-11-21T17:41:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2012:1207",
"initial_release_date": "2012-08-27T12:58:00+00:00",
"revision_history": [
{
"date": "2012-08-27T12:58:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-08-27T13:08:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:41:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "glibc-headers-0:2.5-81.el5_8.7.i386",
"product": {
"name": "glibc-headers-0:2.5-81.el5_8.7.i386",
"product_id": "glibc-headers-0:2.5-81.el5_8.7.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-headers@2.5-81.el5_8.7?arch=i386"
}
}
},
{
"category": "product_version",
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"product": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"product_id": "glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-debuginfo@2.5-81.el5_8.7?arch=i386"
}
}
},
{
"category": "product_version",
"name": "glibc-devel-0:2.5-81.el5_8.7.i386",
"product": {
"name": "glibc-devel-0:2.5-81.el5_8.7.i386",
"product_id": "glibc-devel-0:2.5-81.el5_8.7.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-devel@2.5-81.el5_8.7?arch=i386"
}
}
},
{
"category": "product_version",
"name": "glibc-0:2.5-81.el5_8.7.i386",
"product": {
"name": "glibc-0:2.5-81.el5_8.7.i386",
"product_id": "glibc-0:2.5-81.el5_8.7.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc@2.5-81.el5_8.7?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nscd-0:2.5-81.el5_8.7.i386",
"product": {
"name": "nscd-0:2.5-81.el5_8.7.i386",
"product_id": "nscd-0:2.5-81.el5_8.7.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nscd@2.5-81.el5_8.7?arch=i386"
}
}
},
{
"category": "product_version",
"name": "glibc-common-0:2.5-81.el5_8.7.i386",
"product": {
"name": "glibc-common-0:2.5-81.el5_8.7.i386",
"product_id": "glibc-common-0:2.5-81.el5_8.7.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-common@2.5-81.el5_8.7?arch=i386"
}
}
},
{
"category": "product_version",
"name": "glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"product": {
"name": "glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"product_id": "glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-debuginfo-common@2.5-81.el5_8.7?arch=i386"
}
}
},
{
"category": "product_version",
"name": "glibc-utils-0:2.5-81.el5_8.7.i386",
"product": {
"name": "glibc-utils-0:2.5-81.el5_8.7.i386",
"product_id": "glibc-utils-0:2.5-81.el5_8.7.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-utils@2.5-81.el5_8.7?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"product": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"product_id": "glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-debuginfo@2.5-81.el5_8.7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "glibc-0:2.5-81.el5_8.7.i686",
"product": {
"name": "glibc-0:2.5-81.el5_8.7.i686",
"product_id": "glibc-0:2.5-81.el5_8.7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc@2.5-81.el5_8.7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "glibc-headers-0:2.5-81.el5_8.7.x86_64",
"product": {
"name": "glibc-headers-0:2.5-81.el5_8.7.x86_64",
"product_id": "glibc-headers-0:2.5-81.el5_8.7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-headers@2.5-81.el5_8.7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"product": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"product_id": "glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-debuginfo@2.5-81.el5_8.7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "glibc-devel-0:2.5-81.el5_8.7.x86_64",
"product": {
"name": "glibc-devel-0:2.5-81.el5_8.7.x86_64",
"product_id": "glibc-devel-0:2.5-81.el5_8.7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-devel@2.5-81.el5_8.7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "glibc-0:2.5-81.el5_8.7.x86_64",
"product": {
"name": "glibc-0:2.5-81.el5_8.7.x86_64",
"product_id": "glibc-0:2.5-81.el5_8.7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc@2.5-81.el5_8.7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nscd-0:2.5-81.el5_8.7.x86_64",
"product": {
"name": "nscd-0:2.5-81.el5_8.7.x86_64",
"product_id": "nscd-0:2.5-81.el5_8.7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nscd@2.5-81.el5_8.7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "glibc-common-0:2.5-81.el5_8.7.x86_64",
"product": {
"name": "glibc-common-0:2.5-81.el5_8.7.x86_64",
"product_id": "glibc-common-0:2.5-81.el5_8.7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-common@2.5-81.el5_8.7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "glibc-utils-0:2.5-81.el5_8.7.x86_64",
"product": {
"name": "glibc-utils-0:2.5-81.el5_8.7.x86_64",
"product_id": "glibc-utils-0:2.5-81.el5_8.7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-utils@2.5-81.el5_8.7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "glibc-0:2.5-81.el5_8.7.src",
"product": {
"name": "glibc-0:2.5-81.el5_8.7.src",
"product_id": "glibc-0:2.5-81.el5_8.7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc@2.5-81.el5_8.7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "glibc-headers-0:2.5-81.el5_8.7.ia64",
"product": {
"name": "glibc-headers-0:2.5-81.el5_8.7.ia64",
"product_id": "glibc-headers-0:2.5-81.el5_8.7.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-headers@2.5-81.el5_8.7?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"product": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"product_id": "glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-debuginfo@2.5-81.el5_8.7?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "glibc-devel-0:2.5-81.el5_8.7.ia64",
"product": {
"name": "glibc-devel-0:2.5-81.el5_8.7.ia64",
"product_id": "glibc-devel-0:2.5-81.el5_8.7.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-devel@2.5-81.el5_8.7?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "glibc-0:2.5-81.el5_8.7.ia64",
"product": {
"name": "glibc-0:2.5-81.el5_8.7.ia64",
"product_id": "glibc-0:2.5-81.el5_8.7.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc@2.5-81.el5_8.7?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nscd-0:2.5-81.el5_8.7.ia64",
"product": {
"name": "nscd-0:2.5-81.el5_8.7.ia64",
"product_id": "nscd-0:2.5-81.el5_8.7.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nscd@2.5-81.el5_8.7?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "glibc-common-0:2.5-81.el5_8.7.ia64",
"product": {
"name": "glibc-common-0:2.5-81.el5_8.7.ia64",
"product_id": "glibc-common-0:2.5-81.el5_8.7.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-common@2.5-81.el5_8.7?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "glibc-utils-0:2.5-81.el5_8.7.ia64",
"product": {
"name": "glibc-utils-0:2.5-81.el5_8.7.ia64",
"product_id": "glibc-utils-0:2.5-81.el5_8.7.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-utils@2.5-81.el5_8.7?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "glibc-headers-0:2.5-81.el5_8.7.ppc",
"product": {
"name": "glibc-headers-0:2.5-81.el5_8.7.ppc",
"product_id": "glibc-headers-0:2.5-81.el5_8.7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-headers@2.5-81.el5_8.7?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"product": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"product_id": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-debuginfo@2.5-81.el5_8.7?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "glibc-devel-0:2.5-81.el5_8.7.ppc",
"product": {
"name": "glibc-devel-0:2.5-81.el5_8.7.ppc",
"product_id": "glibc-devel-0:2.5-81.el5_8.7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-devel@2.5-81.el5_8.7?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "glibc-0:2.5-81.el5_8.7.ppc",
"product": {
"name": "glibc-0:2.5-81.el5_8.7.ppc",
"product_id": "glibc-0:2.5-81.el5_8.7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc@2.5-81.el5_8.7?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nscd-0:2.5-81.el5_8.7.ppc",
"product": {
"name": "nscd-0:2.5-81.el5_8.7.ppc",
"product_id": "nscd-0:2.5-81.el5_8.7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nscd@2.5-81.el5_8.7?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "glibc-common-0:2.5-81.el5_8.7.ppc",
"product": {
"name": "glibc-common-0:2.5-81.el5_8.7.ppc",
"product_id": "glibc-common-0:2.5-81.el5_8.7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-common@2.5-81.el5_8.7?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "glibc-utils-0:2.5-81.el5_8.7.ppc",
"product": {
"name": "glibc-utils-0:2.5-81.el5_8.7.ppc",
"product_id": "glibc-utils-0:2.5-81.el5_8.7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-utils@2.5-81.el5_8.7?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"product": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"product_id": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-debuginfo@2.5-81.el5_8.7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "glibc-devel-0:2.5-81.el5_8.7.ppc64",
"product": {
"name": "glibc-devel-0:2.5-81.el5_8.7.ppc64",
"product_id": "glibc-devel-0:2.5-81.el5_8.7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-devel@2.5-81.el5_8.7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "glibc-0:2.5-81.el5_8.7.ppc64",
"product": {
"name": "glibc-0:2.5-81.el5_8.7.ppc64",
"product_id": "glibc-0:2.5-81.el5_8.7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc@2.5-81.el5_8.7?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "glibc-headers-0:2.5-81.el5_8.7.s390x",
"product": {
"name": "glibc-headers-0:2.5-81.el5_8.7.s390x",
"product_id": "glibc-headers-0:2.5-81.el5_8.7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-headers@2.5-81.el5_8.7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"product": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"product_id": "glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-debuginfo@2.5-81.el5_8.7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "glibc-devel-0:2.5-81.el5_8.7.s390x",
"product": {
"name": "glibc-devel-0:2.5-81.el5_8.7.s390x",
"product_id": "glibc-devel-0:2.5-81.el5_8.7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-devel@2.5-81.el5_8.7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "glibc-0:2.5-81.el5_8.7.s390x",
"product": {
"name": "glibc-0:2.5-81.el5_8.7.s390x",
"product_id": "glibc-0:2.5-81.el5_8.7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc@2.5-81.el5_8.7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nscd-0:2.5-81.el5_8.7.s390x",
"product": {
"name": "nscd-0:2.5-81.el5_8.7.s390x",
"product_id": "nscd-0:2.5-81.el5_8.7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nscd@2.5-81.el5_8.7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "glibc-common-0:2.5-81.el5_8.7.s390x",
"product": {
"name": "glibc-common-0:2.5-81.el5_8.7.s390x",
"product_id": "glibc-common-0:2.5-81.el5_8.7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-common@2.5-81.el5_8.7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "glibc-utils-0:2.5-81.el5_8.7.s390x",
"product": {
"name": "glibc-utils-0:2.5-81.el5_8.7.s390x",
"product_id": "glibc-utils-0:2.5-81.el5_8.7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-utils@2.5-81.el5_8.7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"product": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"product_id": "glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-debuginfo@2.5-81.el5_8.7?arch=s390"
}
}
},
{
"category": "product_version",
"name": "glibc-devel-0:2.5-81.el5_8.7.s390",
"product": {
"name": "glibc-devel-0:2.5-81.el5_8.7.s390",
"product_id": "glibc-devel-0:2.5-81.el5_8.7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc-devel@2.5-81.el5_8.7?arch=s390"
}
}
},
{
"category": "product_version",
"name": "glibc-0:2.5-81.el5_8.7.s390",
"product": {
"name": "glibc-0:2.5-81.el5_8.7.s390",
"product_id": "glibc-0:2.5-81.el5_8.7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glibc@2.5-81.el5_8.7?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i686"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.i686",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.ppc64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.s390",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.src"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.src",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-common-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.ppc64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.s390",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.i386"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i686"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.i686",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.ppc64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.s390",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.src"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.src",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-common-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-common-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-debuginfo-common-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.ppc64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.s390",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-devel-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-devel-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-headers-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-headers-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glibc-utils-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "glibc-utils-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.i386"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.ppc",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.s390x",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nscd-0:2.5-81.el5_8.7.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64"
},
"product_reference": "nscd-0:2.5-81.el5_8.7.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-3480",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2012-08-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "847715"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i686",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.src",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i686",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.src",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3480"
},
{
"category": "external",
"summary": "RHBZ#847715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3480",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3480"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3480",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3480"
}
],
"release_date": "2012-08-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-08-27T12:58:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i686",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.src",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i686",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.src",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2012:1207"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.i686",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.src",
"5Client-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.i386",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x",
"5Client-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.i686",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.ppc64",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.src",
"5Server-5.8.Z:glibc-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-common-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.i686",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.ppc64",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-debuginfo-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-debuginfo-common-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.ppc64",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-devel-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-headers-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:glibc-utils-0:2.5-81.el5_8.7.x86_64",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.i386",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ia64",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.ppc",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.s390x",
"5Server-5.8.Z:nscd-0:2.5-81.el5_8.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…