{"id":"CVE-2012-0864","aliases":["EUVD-2012-0889","GHSA-x2p4-f3vf-gwp3","RHSA-2012:0393","RHSA-2012:0397","RHSA-2012:0531","SUSE-SU-2015:0551-1"],"status":"published","title":"Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other...","description":"Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02717,"percentile":0.86114,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2013-05-02T14:00:00Z","modified":"2026-06-28T10:06:08Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-common","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo-common","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-devel","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-headers","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-utils","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nscd","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-static","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-common","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo-common","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-devel","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-headers","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-utils","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nscd","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-static","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-common","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo-common","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-devel","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-headers","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-utils","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nscd","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-static","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-common","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo-common","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-devel","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-headers","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-utils","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nscd","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-static","fixed_in":["0:2.12-1.47.el6_2.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-common","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo-common","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-devel","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-headers","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-utils","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"nscd","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-common","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo-common","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-devel","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-headers","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-utils","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nscd","fixed_in":["0:2.5-81.el5_8.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.47.el6_2.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"rhev-hypervisor6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-20120423.1.el6_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"rhev-hypervisor6-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-20120423.1.el6_2"}]}],"bundled":3}],"products":[{"vendor":"gnu","product":"glibc"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2012-0531.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/52201","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0393.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0397.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=7c1f4834d398163d1ac8101e35e9c36fc3176e6e","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0488.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://sourceware.org/ml/libc-alpha/2012-02/msg00023.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=794766","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.phrack.org/issues.html?issue=67\u0026id=9#article","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0864","tags":["advisory"]},{"url":"http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=7c1f4834d398163d1ac8101e35e9c36fc3176e6e"},{"url":"https://access.redhat.com/errata/RHSA-2012:0393","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0397","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0488"},{"url":"https://access.redhat.com/errata/RHSA-2012:0531","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0864","tags":["report"]},{"url":"https://github.com/advisories/GHSA-x2p4-f3vf-gwp3"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHSA-2012-0058.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=799259","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0393.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0864","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0397.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=804920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=805432","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0531.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-1569","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1569","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-1573","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1573","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150551-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/684534","tags":["report"]},{"url":"https://bugzilla.suse.com/691365","tags":["report"]},{"url":"https://bugzilla.suse.com/741345","tags":["report"]},{"url":"https://bugzilla.suse.com/743689","tags":["report"]},{"url":"https://bugzilla.suse.com/744996","tags":["report"]},{"url":"https://bugzilla.suse.com/745658","tags":["report"]},{"url":"https://bugzilla.suse.com/746824","tags":["report"]},{"url":"https://bugzilla.suse.com/747768","tags":["report"]},{"url":"https://bugzilla.suse.com/750741","tags":["report"]},{"url":"https://bugzilla.suse.com/760795","tags":["report"]},{"url":"https://bugzilla.suse.com/763512","tags":["report"]},{"url":"https://bugzilla.suse.com/767266","tags":["report"]},{"url":"https://bugzilla.suse.com/770891","tags":["report"]},{"url":"https://bugzilla.suse.com/775690","tags":["report"]},{"url":"https://bugzilla.suse.com/777233","tags":["report"]},{"url":"https://bugzilla.suse.com/779320","tags":["report"]},{"url":"https://bugzilla.suse.com/783060","tags":["report"]},{"url":"https://bugzilla.suse.com/785041","tags":["report"]},{"url":"https://bugzilla.suse.com/791928","tags":["report"]},{"url":"https://bugzilla.suse.com/793146","tags":["report"]},{"url":"https://bugzilla.suse.com/795129","tags":["report"]},{"url":"https://bugzilla.suse.com/801246","tags":["report"]},{"url":"https://bugzilla.suse.com/811979","tags":["report"]},{"url":"https://bugzilla.suse.com/813121","tags":["report"]},{"url":"https://bugzilla.suse.com/818628","tags":["report"]},{"url":"https://bugzilla.suse.com/819347","tags":["report"]},{"url":"https://bugzilla.suse.com/822210","tags":["report"]},{"url":"https://bugzilla.suse.com/827811","tags":["report"]},{"url":"https://bugzilla.suse.com/828235","tags":["report"]},{"url":"https://bugzilla.suse.com/828637","tags":["report"]},{"url":"https://bugzilla.suse.com/830268","tags":["report"]},{"url":"https://bugzilla.suse.com/834594","tags":["report"]},{"url":"https://bugzilla.suse.com/836746","tags":["report"]},{"url":"https://bugzilla.suse.com/839870","tags":["report"]},{"url":"https://bugzilla.suse.com/844309","tags":["report"]},{"url":"https://bugzilla.suse.com/864081","tags":["report"]},{"url":"https://bugzilla.suse.com/882600","tags":["report"]},{"url":"https://bugzilla.suse.com/887022","tags":["report"]},{"url":"https://bugzilla.suse.com/892073","tags":["report"]},{"url":"https://bugzilla.suse.com/894553","tags":["report"]},{"url":"https://bugzilla.suse.com/894556","tags":["report"]},{"url":"https://bugzilla.suse.com/906371","tags":["report"]},{"url":"https://bugzilla.suse.com/909053","tags":["report"]},{"url":"https://bugzilla.suse.com/910599","tags":["report"]},{"url":"https://bugzilla.suse.com/913646","tags":["report"]},{"url":"https://bugzilla.suse.com/915526","tags":["report"]},{"url":"https://bugzilla.suse.com/916222","tags":["report"]},{"url":"https://bugzilla.suse.com/918233","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1472","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-0864","description":"Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.","status":"published","published":"2013-05-02T14:00:00Z","modified":"2024-08-06T18:38:14.911Z","updated_at":"2026-11-02T14:34:52.981189Z"}],"euvd":[{"id":"EUVD-2012-0889","description":"Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.","status":"published","published":"2013-05-02T14:00:00Z","modified":"2024-08-06T18:38:14Z","updated_at":"2026-11-03T01:56:19.818597Z"}],"ghsa":[{"id":"GHSA-x2p4-f3vf-gwp3","title":"Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other...","description":"Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.","status":"published","published":"2022-05-17T05:10:42Z","modified":"2023-02-02T15:30:35Z","updated_at":"2026-11-02T14:52:46.933473Z"}],"nvd":[{"id":"CVE-2012-0864","description":"Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.","status":"published","published":"2013-05-02T14:55:05.127Z","modified":"2026-06-16T23:38:24.65Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:17.375282Z"}],"osv":[{"id":"RHSA-2012:0393","title":"Red Hat Security Advisory: glibc security and bug fix update","status":"published","published":"2024-09-13T07:59:05Z","modified":"2026-06-28T10:05:56Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:0397","title":"Red Hat Security Advisory: glibc security update","status":"published","published":"2024-09-13T07:59:09Z","modified":"2026-06-28T10:05:56Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:0531","title":"Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update","status":"published","published":"2024-09-13T07:59:17Z","modified":"2026-06-28T10:06:08Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"SUSE-SU-2015:0551-1","title":"Security update for glibc","description":"\nThis update for glibc contains the following fixes:\n\n    * Fix integer overflows in malloc (CVE-2013-4332, bnc#839870)\n    * Fix buffer overflow in glob (bnc#691365)\n    * Fix buffer overflow in strcoll (CVE-2012-4412, bnc#779320)\n    * Update mount flags in \u003csys/mount.h\u003e (bnc#791928)\n    * Fix buffer overrun in regexp matcher (CVE-2013-0242, bnc#801246)\n    * Fix memory leaks in dlopen (bnc#811979)\n    * Fix stack overflow in getaddrinfo with many results (CVE-2013-1914,\n      bnc#813121)\n    * Fix check for XEN build in glibc_post_upgrade that causes missing\n      init re-exec (bnc#818628)\n    * Don't raise UNDERFLOW in tan/tanf for small but normal argument\n      (bnc#819347)\n    * Properly cross page boundary in SSE4.2 implementation of strcmp\n      (bnc#822210)\n    * Fix robust mutex handling after fork (bnc#827811)\n    * Fix missing character in IBM-943 charset (bnc#828235)\n    * Fix use of alloca in gaih_inet (bnc#828637)\n    * Initialize pointer guard also in static executables (CVE-2013-4788,\n      bnc#830268)\n    * Fix readdir_r with long file names (CVE-2013-4237, bnc#834594).\n\nSecurity Issues:\n\n    * CVE-2012-4412\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412\u003e\n    * CVE-2013-0242\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242\u003e\n    * CVE-2013-1914\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914\u003e\n    * CVE-2013-4237\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237\u003e\n    * CVE-2013-4332\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332\u003e\n    * CVE-2013-4788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4788\u003e\n\n","status":"published","published":"2013-09-13T15:23:14Z","modified":"2026-02-04T03:53:46.201019Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}