CVE-2012-4424 in C Library

Sumário (Inglês)

Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

21/08/2012

Divulgação

09/10/2013

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
10610	GNU C Library strcoll_l.c alloca Excesso de tampão	119	Prova de conceito	Correção oficial	CVE-2012-4424

Fontes

• MITRE
• NVD
• CVE Details