REDHAT-BUG-794766: Integer Overflow
In the Phrack article "A Eulogy for Format Strings", a researcher using nickname "Captain Planet" reported an integer overflow flaw in the format string protection mechanism offered by FORTIFYSOURCE. A remote attacker could provide a specially crafted executable, leading to FORTIFYSOURCE format string protection mechanism bypass, when executed.
References: http://www.phrack.org/issues.html?issue=67&id=9#article
Upstream bug and Kees Cook's proposed patches: http://sourceware.org/bugzilla/showbug.cgi?id=13656 http://sourceware.org/ml/libc-alpha/2012-02/msg00023.html http://sourceware.org/ml/libc-alpha/2012-02/msg00012.html http://sourceware.org/ml/libc-alpha/2012-02/msg00073.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-794766?
The severity of REDHAT-BUG-794766 is rated as medium.
What vulnerability does REDHAT-BUG-794766 describe?
REDHAT-BUG-794766 describes an integer overflow flaw in the format string protection mechanism provided by FORTIFY_SOURCE.
How can I mitigate the risk associated with REDHAT-BUG-794766?
To mitigate the risk of REDHAT-BUG-794766, ensure that software is updated to the latest versions where this vulnerability is addressed.
What is the impact of exploiting REDHAT-BUG-794766?
Exploiting REDHAT-BUG-794766 could allow a remote attacker to execute specially crafted executables that may compromise system integrity.
Which software is affected by REDHAT-BUG-794766?
REDHAT-BUG-794766 affects the GNU glibc library.