CVE-2012-0864: Integer Overflow
First published: Fri Feb 17 2012(Updated: )
In the Phrack article "A Eulogy for Format Strings", a researcher using nickname "Captain Planet" reported an integer overflow flaw in the format string protection mechanism offered by FORTIFY_SOURCE. A remote attacker could provide a specially crafted executable, leading to FORTIFY_SOURCE format string protection mechanism bypass, when executed. References: <a href="http://www.phrack.org/issues.html?issue=67&id=9#article">http://www.phrack.org/issues.html?issue=67&id=9#article</a> Upstream bug and Kees Cook's proposed patches: <a href="http://sourceware.org/bugzilla/show_bug.cgi?id=13656">http://sourceware.org/bugzilla/show_bug.cgi?id=13656</a> <a href="http://sourceware.org/ml/libc-alpha/2012-02/msg00023.html">http://sourceware.org/ml/libc-alpha/2012-02/msg00023.html</a> <a href="http://sourceware.org/ml/libc-alpha/2012-02/msg00012.html">http://sourceware.org/ml/libc-alpha/2012-02/msg00012.html</a> <a href="http://sourceware.org/ml/libc-alpha/2012-02/msg00073.html">http://sourceware.org/ml/libc-alpha/2012-02/msg00073.html</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU C Library | =2.14 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://rhn.redhat.com/errata/RHSA-2012-0393.html
- http://rhn.redhat.com/errata/RHSA-2012-0397.html
- http://rhn.redhat.com/errata/RHSA-2012-0488.html
- http://rhn.redhat.com/errata/RHSA-2012-0531.html
- http://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=7c1f4834d398163d1ac8101e35e9c36fc3176e6e
- http://sourceware.org/ml/libc-alpha/2012-02/msg00023.html
- http://www.phrack.org/issues.html?issue=67&id=9#article
- http://www.securityfocus.com/bid/52201
- https://bugzilla.redhat.com/show_bug.cgi?id=794766
- http://sourceware.org/bugzilla/show_bug.cgi?id=13656
- http://sourceware.org/ml/libc-alpha/2012-02/msg00012.html
- http://sourceware.org/ml/libc-alpha/2012-02/msg00073.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=794763
- https://access.redhat.com/security/cve/CVE-2012-0864
- http://cygwin.com/ml/libc-alpha/2012-02/msg00328.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=794797
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=794766#c3
- http://www.opengroup.org/onlinepubs/9699919799/basedefs/limits.h.html#tag_13_23_03_07
- http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=7c1f4834d398163d1ac8101e35e9c36fc3176e6e
- http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=fa0355175d60ccf610c98f2345504603d3b8ea57
- http://sourceware.org/ml/libc-alpha/2012-03/msg00053.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=794766#c8
- http://sourceware.org/ml/libc-alpha/2012-03/msg00101.html
- https://rhn.redhat.com/errata/RHSA-2012-0393.html
- https://rhn.redhat.com/errata/RHSA-2012-0397.html
- https://admin.fedoraproject.org/updates/FEDORA-2012-2144/glibc-2.14.1-6
- https://admin.fedoraproject.org/updates/FEDORA-2012-2162/glibc-2.14.90-24.fc16.6
- https://admin.fedoraproject.org/updates/FEDORA-2012-2123/glibc-2.15-23.fc17
- https://rhn.redhat.com/errata/RHSA-2012-0488.html
- https://rhn.redhat.com/errata/RHSA-2012-0531.html
Frequently Asked Questions
What is the severity of CVE-2012-0864?
CVE-2012-0864 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2012-0864?
To fix CVE-2012-0864, upgrade to a patched version of GNU C Library (glibc) above version 2.14.
Who is affected by CVE-2012-0864?
CVE-2012-0864 affects applications using GNU C Library (glibc) version 2.14, particularly those relying on FORTIFY_SOURCE for format string protection.
Can CVE-2012-0864 be exploited remotely?
Yes, CVE-2012-0864 can be exploited remotely if an attacker provides a specially crafted executable.
What are the implications of CVE-2012-0864 for developers?
Developers must ensure proper handling of format strings and apply available fixes to prevent exploitation of CVE-2012-0864.
- agent/type
- agent/references
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2012-0864
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/gnu
- canonical/gnu c library
- version/gnu c library/2.14