{"id":"CVE-2012-4424","aliases":["DEBIAN-CVE-2012-4424","DLA-165-1","EUVD-2012-4359","GHSA-xmcm-jqgw-pm47","MGASA-2013-0340"],"status":"published","title":"Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17...","description":"Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03377,"percentile":0.88842,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2013-10-09T22:00:00Z","modified":"2026-10-23T17:47:44Z","fixes":[{"ecosystem":"Debian:12","package":"glibc","fixed_in":["2.17-94"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glibc","fixed_in":["2.17-94"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glibc","fixed_in":["2.17-94"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17-94"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17-94"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17-94"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"eglibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.3-4+deb6u5"}]}],"versions":["2.11.2-10","2.11.2-10+m68k.1","2.11.2-11","2.11.2-11+m68k.1","2.11.2-12","2.11.2-13","2.11.3-1","2.11.3-2","2.11.3-3","2.11.3-4"],"bundled":18},{"source":"osv","ecosystem":"Mageia:2","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.1-11.2.mga2"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:3","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17-7.2.mga3"}]}],"bundled":7}],"products":[{"vendor":"gnu","product":"glibc"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-1991-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:284","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=858238","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://sourceware.org/bugzilla/show_bug.cgi?id=14547","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","evidence","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2012/09/13/16","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201503-04","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:283","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4424"},{"url":"https://github.com/advisories/GHSA-xmcm-jqgw-pm47"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-4424","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0340.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=976408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=995839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1007545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1022280","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2012-4424","description":"Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.","status":"published","published":"2013-10-09T22:00:00Z","modified":"2024-08-06T20:35:09.734Z","updated_at":"2026-11-02T14:34:51.584538Z"}],"euvd":[{"id":"EUVD-2012-4359","description":"Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.","status":"published","published":"2013-10-09T22:00:00Z","modified":"2024-08-06T20:35:09Z","updated_at":"2026-11-03T01:56:07.912368Z"}],"ghsa":[{"id":"GHSA-xmcm-jqgw-pm47","title":"Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17...","description":"Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.","status":"published","published":"2022-05-17T02:39:19Z","modified":"2023-01-27T05:05:24Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:42:41.402468Z"}],"nvd":[{"id":"CVE-2012-4424","description":"Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.","status":"published","published":"2013-10-09T22:55:02.587Z","modified":"2026-06-16T23:44:59.513Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:17.375282Z"}],"osv":[{"id":"CVE-2012-4424","description":"Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.","status":"published","published":"2013-10-09T22:55:02Z","modified":"2026-04-16T06:24:21.078540923Z","updated_at":"2026-11-02T15:43:58.537032Z"},{"id":"DEBIAN-CVE-2012-4424","description":"Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.","status":"published","published":"2013-10-09T22:55:02.587Z","modified":"2026-10-23T17:47:44.44972958Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"DLA-165-1","title":"eglibc - security update","status":"published","published":"2015-03-06T00:00:00Z","modified":"2026-03-09T01:18:41.690279Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"MGASA-2013-0340","title":"Updated glibc package fixes security vulnerabilities","description":"Updated glibc packages fixes the following security issues:\n\nInteger overflow in string/strcoll_l.c in the GNU C Library (aka glibc\nor libc6) 2.17 and earlier allows context-dependent attackers to cause\na denial of service (crash) or possibly execute arbitrary code via a\nlong string, which triggers a heap-based buffer overflow. (CVE-2012-4412)\n\nStack-based buffer overflow in string/strcoll_l.c in the GNU C Library\n(aka glibc or libc6) 2.17 and earlier allows context-dependent\nattackers to cause a denial of service (crash) or possibly execute\narbitrary code via a long string that triggers a malloc failure and\nuse of the alloca function. (CVE-2012-4424)\n\npt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not\nproperly check permissions for tty files, which allows local users to\nchange the permission on the files and obtain access to arbitrary\npseudo-terminals by leveraging a FUSE file system. (CVE-2013-2207)\nNOTE! This is fixed by removing pt_chown wich may break chroots\n      if their devpts was not mounted correctly. \n      (make sure to mount the devpts correctly with gid=5)\n\nsysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6)\n2.18 and earlier allows context-dependent attackers to cause a denial\nof service (out-of-bounds write and crash) or possibly execute\narbitrary code via a crafted (1) NTFS or (2) CIFS image. (CVE-2013-4237)\n\nMultiple integer overflows in malloc/malloc.c in the GNU C Library\n(aka glibc or libc6) 2.18 and earlier allow context-dependent\nattackers to cause a denial of service (heap corruption) via a large\nvalue to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4)\nmemalign, or (5) aligned_alloc functions. (CVE-2013-4332)\n\nA stack (frame) overflow flaw, which led to a denial of service \n(application crash), was found in the way glibc's getaddrinfo() function\nprocessed certain requests when called with AF_INET6. A similar flaw to\nCVE-2013-1914, this affects AF_INET6 rather than AF_UNSPEC (CVE-2013-4458).\n\nThe PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6)\n2.4, 2.17, and earlier, and Embedded GLIBC (EGLIBC) does not initialize\nthe random value for the pointer guard, which makes it easier for context-\ndependent attackers to control execution flow by leveraging a buffer-\noverflow vulnerability in an application and using the known zero value\npointer guard to calculate a pointer address. (CVE-2013-4788)\n\nOther fixes in this update:\n- Correct the processing of '\\x80' characters in crypt_freesec.c\n- drop minimal required kernel to 2.6.32 so it works in chroots on top\n  of enterprise kernels and for OpenVZ users.\n- fix typo in nscd.service\n","status":"published","published":"2013-11-22T18:44:49Z","modified":"2026-04-16T06:26:21.514210956Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}