REDHAT-BUG-2459853: Buffer Overflow
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GNU C Library (glibc) scanf familyto a version that resolves this vulnerability.Fixed in 2.43
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2459853?
The severity of REDHAT-BUG-2459853 is medium with a score of 4.
How do I fix REDHAT-BUG-2459853?
To fix REDHAT-BUG-2459853, update the GNU C Library to a version beyond 2.43.
What causes REDHAT-BUG-2459853?
REDHAT-BUG-2459853 is caused by using the scanf family of functions with a format width specifier greater than 1024, leading to a heap buffer overflow.
Which versions are affected by REDHAT-BUG-2459853?
Versions of GNU C Library from 2.7 to 2.43 are affected by REDHAT-BUG-2459853.
What kind of vulnerability is REDHAT-BUG-2459853?
REDHAT-BUG-2459853 is classified as a buffer overflow vulnerability.