Every CVESearch/Get API key

CVE-2012-3405

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and...

5.0 MediumFix available

CVE-2012-3405 is a medium vulnerability (CVSS 5.0) in Gnu Glibc, published September 13, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. Fixed in glibc 2.13-35.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
2.09%EPSS, 81st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.13-35glibc +40 more

Description

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

Exploit likelihood

2.09%Up 1.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glibc
Debian:12
before 2.13-35
2.13-35
glibc
Debian:13
before 2.13-35
2.13-35
glibc
Debian:14
before 2.13-35
2.13-35
eglibc
Debian:6.0
From an advisory covering 18 CVEs
before 2.11.3-4+deb6u5, plus listed versions
2.11.2-102.11.2-10+m68k.12.11.2-112.11.2-11+m68k.12.11.2-12
Show 5 moreShow less
2.11.2-132.11.3-12.11.3-22.11.3-32.11.3-4
2.11.3-4+deb6u5
glibc
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-common
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-debuginfo-common
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-headers
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
Show 31 moreShow less
Affected packages
PackageAffectedFixed
glibc-utils
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
nscd
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-static
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-debuginfo-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-headers
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-utils
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
nscd
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-static
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-common
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-debuginfo-common
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-headers
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-utils
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
nscd
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-static
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-debuginfo-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-headers
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-utils
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
nscd
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
glibc-static
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:2.12-1.80.el6_3.3
0:2.12-1.80.el6_3.3
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
From an advisory covering 3 CVEs
before 0:6.3-20120815.0.el6_3
0:6.3-20120815.0.el6_3

What each source reports

NVD Score used5.0

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

Record
CVE-2012-3405
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

Record
CVE-2012-3405
Updated
2026-11-02
EUVDEUVD-2012-3376No score

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

Record
EUVD-2012-3376
Updated
2026-11-03
GitHub AdvisoriesGHSA-fwxh-prpx-6qg8No score

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and...

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

Record
GHSA-fwxh-prpx-6qg8
Updated
2026-11-02
OSVNo score

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

Record
CVE-2012-3405
Updated
2026-11-02
OSVDEBIAN-CVE-2012-3405No score

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.

Record
DEBIAN-CVE-2012-3405
Updated
2026-11-02
OSVSUSE-SU-2015:0551-1No score

Security update for glibc

This update for glibc contains the following fixes:

* Fix integer overflows in malloc (CVE-2013-4332, bnc#839870)
* Fix buffer overflow in glob (bnc#691365)
* Fix buffer overflow in strcoll (CVE-2012-4412, bnc#779320)
* Update mount flags in <sys/mount.h> (bnc#791928)
* Fix buffer overrun in regexp matcher (CVE-2013-0242, bnc#801246)
* Fix memory leaks in dlopen (bnc#811979)
* Fix stack overflow in getaddrinfo with many results (CVE-2013-1914,
  bnc#813121)
* Fix check for XEN build in glibc_post_upgrade that causes missing
  init re-exec (bnc#818628)
* Don't raise UNDERFLOW in tan/tanf for small but normal argument
  (bnc#819347)
* Properly cross page boundary in SSE4.2 implementation of strcmp
  (bnc#822210)
* Fix robust mutex handling after fork (bnc#827811)
* Fix missing character in IBM-943 charset (bnc#828235)
* Fix use of alloca in gaih_inet (bnc#828637)
* Initialize pointer guard also in static executables (CVE-2013-4788,
  bnc#830268)
* Fix readdir_r with long file names (CVE-2013-4237, bnc#834594).

Security Issues:

* CVE-2012-4412
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412>
* CVE-2013-0242
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242>
* CVE-2013-1914
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914>
* CVE-2013-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237>
* CVE-2013-4332
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332>
* CVE-2013-4788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4788>
Record
SUSE-SU-2015:0551-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 92 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open