CVE-2012-2114: Buffer Overflow
Published Aug 31, 2012
·Updated
Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string to an unbuffered stream such as stderr.
Affected Software
1 affected component
Etalabs Musl<=0.8.8
Event History
Aug 31, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2114?
CVE-2012-2114 has been assigned a medium severity rating due to its potential to cause denial of service and execute arbitrary code.
2
Who is affected by CVE-2012-2114?
CVE-2012-2114 affects musl versions before 0.8.8 that utilize fprintf with unbuffered streams.
3
How do I fix CVE-2012-2114?
To fix CVE-2012-2114, you should upgrade musl to version 0.8.8 or later.
4
What type of vulnerability is CVE-2012-2114?
CVE-2012-2114 is a stack-based buffer overflow vulnerability.
5
What can attackers achieve by exploiting CVE-2012-2114?
Attackers can leverage CVE-2012-2114 to cause a denial of service or potentially execute arbitrary code.