{"id":"CVE-2012-3480","aliases":["DEBIAN-CVE-2012-3480","DLA-165-1","EUVD-2012-3436","GHSA-mch7-w8fj-4pc4","RHSA-2012:1207","RHSA-2012:1208","RHSA-2012:1325","SUSE-SU-2015:0551-1"],"status":"published","title":"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other...","description":"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00993,"percentile":0.62853,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-189"],"published":"2012-08-25T10:00:00Z","modified":"2026-10-23T17:47:23Z","exploits":[{"source":"exploitdb","id":"EDB-37631","title":"GNU glibc - Multiple Local Stack Buffer Overflow Vulnerabilities","type":"local","platform":"linux","date":"2012-08-13","verified":true,"url":"https://www.exploit-db.com/exploits/37631"}],"fixes":[{"ecosystem":"Debian:12","package":"glibc","fixed_in":["2.13-36"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glibc","fixed_in":["2.13-36"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glibc","fixed_in":["2.13-36"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-common","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo-common","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-devel","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-headers","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-utils","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"nscd","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-common","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo-common","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-devel","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-headers","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-utils","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nscd","fixed_in":["0:2.5-81.el5_8.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-common","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo-common","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-devel","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-headers","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-utils","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nscd","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-static","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-common","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo-common","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-devel","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-headers","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-utils","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nscd","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-static","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-common","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo-common","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-devel","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-headers","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-utils","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nscd","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-static","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-common","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo-common","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-devel","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-headers","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-utils","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nscd","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-static","fixed_in":["0:2.12-1.80.el6_3.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-36"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-36"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-36"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"eglibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.3-4+deb6u5"}]}],"versions":["2.11.2-10","2.11.2-10+m68k.1","2.11.2-11","2.11.2-11+m68k.1","2.11.2-12","2.11.2-13","2.11.3-1","2.11.3-2","2.11.3-3","2.11.3-4"],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-81.el5_8.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.80.el6_3.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"rhev-hypervisor6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3-20120926.0.el6_3"}]}],"bundled":2}],"products":[{"vendor":"gnu","product":"glibc"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2012/08/13/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://osvdb.org/84710","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/54982","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2012/08/13/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1325.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://sourceware.org/bugzilla/show_bug.cgi?id=14459","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1262.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/201503-04","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1207.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id?1027374","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-1589-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/50201","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/50422","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1208.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3480","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1207","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1208","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1262"},{"url":"https://access.redhat.com/errata/RHSA-2012:1325","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=847715","tags":["report"]},{"url":"https://github.com/advisories/GHSA-mch7-w8fj-4pc4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-3480","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1207.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3480","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1208.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=851252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856830","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1325.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3515","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150551-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/684534","tags":["report"]},{"url":"https://bugzilla.suse.com/691365","tags":["report"]},{"url":"https://bugzilla.suse.com/741345","tags":["report"]},{"url":"https://bugzilla.suse.com/743689","tags":["report"]},{"url":"https://bugzilla.suse.com/744996","tags":["report"]},{"url":"https://bugzilla.suse.com/745658","tags":["report"]},{"url":"https://bugzilla.suse.com/746824","tags":["report"]},{"url":"https://bugzilla.suse.com/747768","tags":["report"]},{"url":"https://bugzilla.suse.com/750741","tags":["report"]},{"url":"https://bugzilla.suse.com/760795","tags":["report"]},{"url":"https://bugzilla.suse.com/763512","tags":["report"]},{"url":"https://bugzilla.suse.com/767266","tags":["report"]},{"url":"https://bugzilla.suse.com/770891","tags":["report"]},{"url":"https://bugzilla.suse.com/775690","tags":["report"]},{"url":"https://bugzilla.suse.com/777233","tags":["report"]},{"url":"https://bugzilla.suse.com/779320","tags":["report"]},{"url":"https://bugzilla.suse.com/783060","tags":["report"]},{"url":"https://bugzilla.suse.com/785041","tags":["report"]},{"url":"https://bugzilla.suse.com/791928","tags":["report"]},{"url":"https://bugzilla.suse.com/793146","tags":["report"]},{"url":"https://bugzilla.suse.com/795129","tags":["report"]},{"url":"https://bugzilla.suse.com/801246","tags":["report"]},{"url":"https://bugzilla.suse.com/811979","tags":["report"]},{"url":"https://bugzilla.suse.com/813121","tags":["report"]},{"url":"https://bugzilla.suse.com/818628","tags":["report"]},{"url":"https://bugzilla.suse.com/819347","tags":["report"]},{"url":"https://bugzilla.suse.com/822210","tags":["report"]},{"url":"https://bugzilla.suse.com/827811","tags":["report"]},{"url":"https://bugzilla.suse.com/828235","tags":["report"]},{"url":"https://bugzilla.suse.com/828637","tags":["report"]},{"url":"https://bugzilla.suse.com/830268","tags":["report"]},{"url":"https://bugzilla.suse.com/834594","tags":["report"]},{"url":"https://bugzilla.suse.com/836746","tags":["report"]},{"url":"https://bugzilla.suse.com/839870","tags":["report"]},{"url":"https://bugzilla.suse.com/844309","tags":["report"]},{"url":"https://bugzilla.suse.com/864081","tags":["report"]},{"url":"https://bugzilla.suse.com/882600","tags":["report"]},{"url":"https://bugzilla.suse.com/887022","tags":["report"]},{"url":"https://bugzilla.suse.com/892073","tags":["report"]},{"url":"https://bugzilla.suse.com/894553","tags":["report"]},{"url":"https://bugzilla.suse.com/894556","tags":["report"]},{"url":"https://bugzilla.suse.com/906371","tags":["report"]},{"url":"https://bugzilla.suse.com/909053","tags":["report"]},{"url":"https://bugzilla.suse.com/910599","tags":["report"]},{"url":"https://bugzilla.suse.com/913646","tags":["report"]},{"url":"https://bugzilla.suse.com/915526","tags":["report"]},{"url":"https://bugzilla.suse.com/916222","tags":["report"]},{"url":"https://bugzilla.suse.com/918233","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1472","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-3480","description":"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.","status":"published","published":"2012-08-25T10:00:00Z","modified":"2024-08-06T20:05:12.639Z","updated_at":"2026-11-02T14:34:50.615647Z"}],"euvd":[{"id":"EUVD-2012-3436","description":"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.","status":"published","published":"2012-08-25T10:00:00Z","modified":"2024-08-06T20:05:12Z","updated_at":"2026-11-03T01:56:10.882899Z"}],"ghsa":[{"id":"GHSA-mch7-w8fj-4pc4","title":"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other...","description":"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.","status":"published","published":"2022-05-17T02:39:19Z","modified":"2023-02-02T18:31:07Z","updated_at":"2026-11-02T14:52:47.451891Z"}],"nvd":[{"id":"CVE-2012-3480","description":"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.","status":"published","published":"2012-08-25T10:29:51.77Z","modified":"2026-06-16T23:43:18.42Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:15.188652Z"}],"osv":[{"id":"CVE-2012-3480","description":"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.","status":"published","published":"2012-08-25T10:29:51Z","modified":"2026-04-10T03:42:23.367351Z","updated_at":"2026-11-02T15:43:58.537032Z"},{"id":"DEBIAN-CVE-2012-3480","description":"Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.","status":"published","published":"2012-08-25T10:29:51.77Z","modified":"2026-10-23T17:47:23.208955151Z","updated_at":"2026-11-02T15:45:24.92418Z"},{"id":"DLA-165-1","title":"eglibc - security update","status":"published","published":"2015-03-06T00:00:00Z","modified":"2026-03-09T01:18:41.690279Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"RHSA-2012:1207","title":"Red Hat Security Advisory: glibc security and bug fix update","status":"published","published":"2024-09-13T08:00:01Z","modified":"2026-06-28T10:06:32Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1208","title":"Red Hat Security Advisory: glibc security update","status":"published","published":"2024-09-13T08:00:08Z","modified":"2026-06-28T10:06:33Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1325","title":"Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update","status":"published","published":"2024-09-13T08:00:01Z","modified":"2026-06-28T10:06:47Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"SUSE-SU-2015:0551-1","title":"Security update for glibc","description":"\nThis update for glibc contains the following fixes:\n\n    * Fix integer overflows in malloc (CVE-2013-4332, bnc#839870)\n    * Fix buffer overflow in glob (bnc#691365)\n    * Fix buffer overflow in strcoll (CVE-2012-4412, bnc#779320)\n    * Update mount flags in \u003csys/mount.h\u003e (bnc#791928)\n    * Fix buffer overrun in regexp matcher (CVE-2013-0242, bnc#801246)\n    * Fix memory leaks in dlopen (bnc#811979)\n    * Fix stack overflow in getaddrinfo with many results (CVE-2013-1914,\n      bnc#813121)\n    * Fix check for XEN build in glibc_post_upgrade that causes missing\n      init re-exec (bnc#818628)\n    * Don't raise UNDERFLOW in tan/tanf for small but normal argument\n      (bnc#819347)\n    * Properly cross page boundary in SSE4.2 implementation of strcmp\n      (bnc#822210)\n    * Fix robust mutex handling after fork (bnc#827811)\n    * Fix missing character in IBM-943 charset (bnc#828235)\n    * Fix use of alloca in gaih_inet (bnc#828637)\n    * Initialize pointer guard also in static executables (CVE-2013-4788,\n      bnc#830268)\n    * Fix readdir_r with long file names (CVE-2013-4237, bnc#834594).\n\nSecurity Issues:\n\n    * CVE-2012-4412\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412\u003e\n    * CVE-2013-0242\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242\u003e\n    * CVE-2013-1914\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914\u003e\n    * CVE-2013-4237\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237\u003e\n    * CVE-2013-4332\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332\u003e\n    * CVE-2013-4788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4788\u003e\n\n","status":"published","published":"2013-09-13T15:23:14Z","modified":"2026-02-04T03:53:46.201019Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}