Every CVESearch/Get API key

CVE-2012-0864

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other...

6.8 MediumFix available

CVE-2012-0864 is a medium vulnerability (CVSS 6.8) in Gnu Glibc, published May 2, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.72%, the 86th percentile. Fixed in glibc 0:2.12-1.47.el6_2.9.

What does this mean?
Severity
6.8 MediumCVSS 2.0, NVD
Exploit chance
2.72%EPSS, 86th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0:2.12-1.47.el6_2.9glibc +53 more

Description

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.

Exploit likelihood

2.72%Up 1.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glibc
Red Hat:enterprise_linux:6::client
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-common
Red Hat:enterprise_linux:6::client
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-debuginfo
Red Hat:enterprise_linux:6::client
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-debuginfo-common
Red Hat:enterprise_linux:6::client
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-devel
Red Hat:enterprise_linux:6::client
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-headers
Red Hat:enterprise_linux:6::client
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-utils
Red Hat:enterprise_linux:6::client
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
nscd
Red Hat:enterprise_linux:6::client
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-static
Red Hat:enterprise_linux:6::client
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
Show 44 moreShow less
Affected packages
PackageAffectedFixed
glibc-common
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-debuginfo
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-debuginfo-common
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-devel
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-headers
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-utils
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
nscd
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-static
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc
Red Hat:enterprise_linux:6::server
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-common
Red Hat:enterprise_linux:6::server
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-debuginfo
Red Hat:enterprise_linux:6::server
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-debuginfo-common
Red Hat:enterprise_linux:6::server
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-devel
Red Hat:enterprise_linux:6::server
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-headers
Red Hat:enterprise_linux:6::server
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-utils
Red Hat:enterprise_linux:6::server
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
nscd
Red Hat:enterprise_linux:6::server
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-static
Red Hat:enterprise_linux:6::server
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-common
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-debuginfo-common
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-devel
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-headers
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-utils
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
nscd
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc-static
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.47.el6_2.9
0:2.12-1.47.el6_2.9
glibc
Red Hat:enterprise_linux:5::client
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-common
Red Hat:enterprise_linux:5::client
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-debuginfo
Red Hat:enterprise_linux:5::client
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-debuginfo-common
Red Hat:enterprise_linux:5::client
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-devel
Red Hat:enterprise_linux:5::client
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-headers
Red Hat:enterprise_linux:5::client
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-utils
Red Hat:enterprise_linux:5::client
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
nscd
Red Hat:enterprise_linux:5::client
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc
Red Hat:enterprise_linux:5::server
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-common
Red Hat:enterprise_linux:5::server
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-debuginfo
Red Hat:enterprise_linux:5::server
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-debuginfo-common
Red Hat:enterprise_linux:5::server
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-devel
Red Hat:enterprise_linux:5::server
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-headers
Red Hat:enterprise_linux:5::server
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
glibc-utils
Red Hat:enterprise_linux:5::server
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
nscd
Red Hat:enterprise_linux:5::server
before 0:2.5-81.el5_8.1
0:2.5-81.el5_8.1
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
From an advisory covering 3 CVEs
before 0:6.2-20120423.1.el6_2
0:6.2-20120423.1.el6_2
rhev-hypervisor6-tools
Red Hat:enterprise_linux:6::hypervisor
From an advisory covering 3 CVEs
before 0:6.2-20120423.1.el6_2
0:6.2-20120423.1.el6_2

What each source reports

NVD Score used6.8

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.

Record
CVE-2012-0864
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.

Record
CVE-2012-0864
Updated
2026-11-02
EUVDEUVD-2012-0889No score

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.

Record
EUVD-2012-0889
Updated
2026-11-03
GitHub AdvisoriesGHSA-x2p4-f3vf-gwp3No score

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other...

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.

Record
GHSA-x2p4-f3vf-gwp3
Updated
2026-11-02
OSVSUSE-SU-2015:0551-1No score

Security update for glibc

This update for glibc contains the following fixes:

* Fix integer overflows in malloc (CVE-2013-4332, bnc#839870)
* Fix buffer overflow in glob (bnc#691365)
* Fix buffer overflow in strcoll (CVE-2012-4412, bnc#779320)
* Update mount flags in <sys/mount.h> (bnc#791928)
* Fix buffer overrun in regexp matcher (CVE-2013-0242, bnc#801246)
* Fix memory leaks in dlopen (bnc#811979)
* Fix stack overflow in getaddrinfo with many results (CVE-2013-1914,
  bnc#813121)
* Fix check for XEN build in glibc_post_upgrade that causes missing
  init re-exec (bnc#818628)
* Don't raise UNDERFLOW in tan/tanf for small but normal argument
  (bnc#819347)
* Properly cross page boundary in SSE4.2 implementation of strcmp
  (bnc#822210)
* Fix robust mutex handling after fork (bnc#827811)
* Fix missing character in IBM-943 charset (bnc#828235)
* Fix use of alloca in gaih_inet (bnc#828637)
* Initialize pointer guard also in static executables (CVE-2013-4788,
  bnc#830268)
* Fix readdir_r with long file names (CVE-2013-4237, bnc#834594).

Security Issues:

* CVE-2012-4412
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412>
* CVE-2013-0242
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242>
* CVE-2013-1914
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914>
* CVE-2013-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237>
* CVE-2013-4332
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332>
* CVE-2013-4788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4788>
Record
SUSE-SU-2015:0551-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 95 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open