{"id":"CVE-2012-3406","aliases":["DEBIAN-CVE-2012-3406","DLA-165-1","DSA-3169-1","EUVD-2012-3377","GHSA-8mj9-m673-h2gf","MGASA-2015-0013","RHSA-2012:1097","RHSA-2012:1098","RHSA-2012:1200","SUSE-SU-2015:0551-1","openSUSE-SU-2024:10154-1"],"status":"published","title":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and...","description":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not \"properly restrict the use of\" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03163,"percentile":0.88077,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2013-09-13T15:23:14Z","modified":"2026-10-23T17:47:39Z","fixes":[{"ecosystem":"Debian:12","package":"glibc","fixed_in":["2.19-14"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glibc","fixed_in":["2.19-14"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glibc","fixed_in":["2.19-14"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-common","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo-common","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-devel","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-headers","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-utils","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"nscd","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-common","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo-common","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-devel","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-headers","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-utils","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nscd","fixed_in":["0:2.5-81.el5_8.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19-14"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19-14"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19-14"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"eglibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.3-4+deb6u5"}]}],"versions":["2.11.2-10","2.11.2-10+m68k.1","2.11.2-11","2.11.2-11+m68k.1","2.11.2-12","2.11.2-13","2.11.3-1","2.11.3-2","2.11.3-3","2.11.3-4"],"bundled":18},{"source":"osv","ecosystem":"Debian:7","package":"eglibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-38+deb7u8"}]}],"versions":["2.13-38","2.13-38+deb7u1","2.13-38+deb7u2","2.13-38+deb7u3","2.13-38+deb7u4","2.13-38+deb7u5","2.13-38+deb7u6","2.13-38+deb7u7"],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18-9.8.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"rhev-hypervisor6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3-20120815.0.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24-2.3"}]}],"bundled":31}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"gnu","product":"glibc"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_virtualization"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2012-1200.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=826943","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1097.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/201503-04","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1098.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1589-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1185.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/07/11/17","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=594722","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3406","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8mj9-m673-h2gf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-3406","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0013.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14852","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1097","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1097.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3406","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3406","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1098","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=837026","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1098.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3404","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3404","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3405","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1200","tags":["advisory"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=835169","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1200.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150551-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/684534","tags":["report"]},{"url":"https://bugzilla.suse.com/691365","tags":["report"]},{"url":"https://bugzilla.suse.com/741345","tags":["report"]},{"url":"https://bugzilla.suse.com/743689","tags":["report"]},{"url":"https://bugzilla.suse.com/744996","tags":["report"]},{"url":"https://bugzilla.suse.com/745658","tags":["report"]},{"url":"https://bugzilla.suse.com/746824","tags":["report"]},{"url":"https://bugzilla.suse.com/747768","tags":["report"]},{"url":"https://bugzilla.suse.com/750741","tags":["report"]},{"url":"https://bugzilla.suse.com/760795","tags":["report"]},{"url":"https://bugzilla.suse.com/763512","tags":["report"]},{"url":"https://bugzilla.suse.com/767266","tags":["report"]},{"url":"https://bugzilla.suse.com/770891","tags":["report"]},{"url":"https://bugzilla.suse.com/775690","tags":["report"]},{"url":"https://bugzilla.suse.com/777233","tags":["report"]},{"url":"https://bugzilla.suse.com/779320","tags":["report"]},{"url":"https://bugzilla.suse.com/783060","tags":["report"]},{"url":"https://bugzilla.suse.com/785041","tags":["report"]},{"url":"https://bugzilla.suse.com/791928","tags":["report"]},{"url":"https://bugzilla.suse.com/793146","tags":["report"]},{"url":"https://bugzilla.suse.com/795129","tags":["report"]},{"url":"https://bugzilla.suse.com/801246","tags":["report"]},{"url":"https://bugzilla.suse.com/811979","tags":["report"]},{"url":"https://bugzilla.suse.com/813121","tags":["report"]},{"url":"https://bugzilla.suse.com/818628","tags":["report"]},{"url":"https://bugzilla.suse.com/819347","tags":["report"]},{"url":"https://bugzilla.suse.com/822210","tags":["report"]},{"url":"https://bugzilla.suse.com/827811","tags":["report"]},{"url":"https://bugzilla.suse.com/828235","tags":["report"]},{"url":"https://bugzilla.suse.com/828637","tags":["report"]},{"url":"https://bugzilla.suse.com/830268","tags":["report"]},{"url":"https://bugzilla.suse.com/834594","tags":["report"]},{"url":"https://bugzilla.suse.com/836746","tags":["report"]},{"url":"https://bugzilla.suse.com/839870","tags":["report"]},{"url":"https://bugzilla.suse.com/844309","tags":["report"]},{"url":"https://bugzilla.suse.com/864081","tags":["report"]},{"url":"https://bugzilla.suse.com/882600","tags":["report"]},{"url":"https://bugzilla.suse.com/887022","tags":["report"]},{"url":"https://bugzilla.suse.com/892073","tags":["report"]},{"url":"https://bugzilla.suse.com/894553","tags":["report"]},{"url":"https://bugzilla.suse.com/894556","tags":["report"]},{"url":"https://bugzilla.suse.com/906371","tags":["report"]},{"url":"https://bugzilla.suse.com/909053","tags":["report"]},{"url":"https://bugzilla.suse.com/910599","tags":["report"]},{"url":"https://bugzilla.suse.com/913646","tags":["report"]},{"url":"https://bugzilla.suse.com/915526","tags":["report"]},{"url":"https://bugzilla.suse.com/916222","tags":["report"]},{"url":"https://bugzilla.suse.com/918233","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1472","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5417","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-3406","description":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not \"properly restrict the use of\" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.","status":"published","published":"2014-02-10T17:00:00Z","modified":"2024-08-06T20:05:12.465Z","updated_at":"2026-11-02T14:34:50.94153Z"}],"euvd":[{"id":"EUVD-2012-3377","description":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not \"properly restrict the use of\" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.","status":"published","published":"2014-02-10T17:00:00Z","modified":"2024-08-06T20:05:12Z","updated_at":"2026-11-03T01:56:10.882899Z"}],"ghsa":[{"id":"GHSA-8mj9-m673-h2gf","title":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and...","description":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not \"properly restrict the use of\" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.","status":"published","published":"2022-05-14T01:08:00Z","modified":"2023-02-02T05:03:08Z","updated_at":"2026-11-02T14:51:34.49846Z"}],"nvd":[{"id":"CVE-2012-3406","description":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not \"properly restrict the use of\" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.","status":"published","published":"2014-02-10T18:15:10.12Z","modified":"2026-06-16T23:43:09.57Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:17.375282Z"}],"osv":[{"id":"CVE-2012-3406","description":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not \"properly restrict the use of\" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.","status":"published","published":"2014-02-10T18:15:10Z","modified":"2026-04-16T06:17:51.833005875Z","updated_at":"2026-11-02T15:43:58.537032Z"},{"id":"DEBIAN-CVE-2012-3406","description":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not \"properly restrict the use of\" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.","status":"published","published":"2014-02-10T18:15:10.12Z","modified":"2026-10-23T17:47:39.276783649Z","updated_at":"2026-11-02T15:45:24.92418Z"},{"id":"DLA-165-1","title":"eglibc - security update","status":"published","published":"2015-03-06T00:00:00Z","modified":"2026-03-09T01:18:41.690279Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3169-1","title":"eglibc - security update","status":"published","published":"2015-02-23T00:00:00Z","modified":"2026-03-09T01:19:03.925254Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0013","title":"Updated glibc packages fix security vulnerabilities","description":"The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc)\n2.5, 2.12, and probably other versions does not \"properly restrict the use of\"\nthe alloca function when allocating the SPECS array, which allows context-\ndependent attackers to bypass the FORTIFY_SOURCE format-string protection\nmechanism and cause a denial of service (crash) or possibly execute arbitrary\ncode via a crafted format string using positional parameters and a large\nnumber of format specifiers (CVE-2012-3406).\n\nThe nss_dns implementation of getnetbyname could run into an infinite loop\nif the DNS response contained a PTR record of an unexpected format\n(CVE-2014-9402).\n\nAlso glibc lock elision (new feature in glibc 2.18) has been disabled\nas it can break glibc at runtime on newer Intel hardware (due to hardware\nbug)\n","status":"published","published":"2015-01-08T12:24:22Z","modified":"2026-04-16T06:26:15.221038973Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10154-1","title":"glibc-2.24-2.3 on GA media","description":"These are all security issues fixed in the glibc-2.24-2.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:49:26.960082Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2012:1097","title":"Red Hat Security Advisory: glibc security and bug fix update","status":"published","published":"2024-09-13T07:59:49Z","modified":"2026-06-28T10:06:26Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1098","title":"Red Hat Security Advisory: glibc security and bug fix update","status":"published","published":"2024-09-13T07:59:53Z","modified":"2026-06-28T10:06:26Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1200","title":"Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update","status":"published","published":"2024-09-13T07:59:52Z","modified":"2026-06-28T10:06:31Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"SUSE-SU-2015:0551-1","title":"Security update for glibc","description":"\nThis update for glibc contains the following fixes:\n\n    * Fix integer overflows in malloc (CVE-2013-4332, bnc#839870)\n    * Fix buffer overflow in glob (bnc#691365)\n    * Fix buffer overflow in strcoll (CVE-2012-4412, bnc#779320)\n    * Update mount flags in \u003csys/mount.h\u003e (bnc#791928)\n    * Fix buffer overrun in regexp matcher (CVE-2013-0242, bnc#801246)\n    * Fix memory leaks in dlopen (bnc#811979)\n    * Fix stack overflow in getaddrinfo with many results (CVE-2013-1914,\n      bnc#813121)\n    * Fix check for XEN build in glibc_post_upgrade that causes missing\n      init re-exec (bnc#818628)\n    * Don't raise UNDERFLOW in tan/tanf for small but normal argument\n      (bnc#819347)\n    * Properly cross page boundary in SSE4.2 implementation of strcmp\n      (bnc#822210)\n    * Fix robust mutex handling after fork (bnc#827811)\n    * Fix missing character in IBM-943 charset (bnc#828235)\n    * Fix use of alloca in gaih_inet (bnc#828637)\n    * Initialize pointer guard also in static executables (CVE-2013-4788,\n      bnc#830268)\n    * Fix readdir_r with long file names (CVE-2013-4237, bnc#834594).\n\nSecurity Issues:\n\n    * CVE-2012-4412\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412\u003e\n    * CVE-2013-0242\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242\u003e\n    * CVE-2013-1914\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914\u003e\n    * CVE-2013-4237\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237\u003e\n    * CVE-2013-4332\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332\u003e\n    * CVE-2013-4788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4788\u003e\n\n","status":"published","published":"2013-09-13T15:23:14Z","modified":"2026-02-04T03:53:46.201019Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}