Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-4412
HistoryOct 09, 2013 - 10:55 p.m.

CVE-2012-4412

2013-10-0922:55:02
CWE-189
[email protected]
web.nvd.nist.gov
9

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.8

Confidence

High

EPSS

0.046

Percentile

92.6%

JSON

Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.

Affected configurations

Nvd
Node
gnuglibcRange≤2.17
OR
gnuglibcMatch2.0
OR
gnuglibcMatch2.0.1
OR
gnuglibcMatch2.0.2
OR
gnuglibcMatch2.0.3
OR
gnuglibcMatch2.0.4
OR
gnuglibcMatch2.0.5
OR
gnuglibcMatch2.0.6
OR
gnuglibcMatch2.1
OR
gnuglibcMatch2.1.1
OR
gnuglibcMatch2.1.1.6
OR
gnuglibcMatch2.1.2
OR
gnuglibcMatch2.1.3
OR
gnuglibcMatch2.1.9
OR
gnuglibcMatch2.10.1
OR
gnuglibcMatch2.11
OR
gnuglibcMatch2.11.1
OR
gnuglibcMatch2.11.2
OR
gnuglibcMatch2.11.3
OR
gnuglibcMatch2.12.1
OR
gnuglibcMatch2.12.2
OR
gnuglibcMatch2.13
OR
gnuglibcMatch2.14
OR
gnuglibcMatch2.14.1
OR
gnuglibcMatch2.15
OR
gnuglibcMatch2.16
VendorProductVersionCPE
gnuglibc*cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
gnuglibc2.0cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*
gnuglibc2.0.1cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*
gnuglibc2.0.2cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*
gnuglibc2.0.3cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*
gnuglibc2.0.4cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*
gnuglibc2.0.5cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*
gnuglibc2.0.6cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*
gnuglibc2.1cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*
gnuglibc2.1.1cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 261

Related

cvelist 1
ubuntucve 1
debiancve 1
prion 1
cve 1
exploitdb 1
osv 3
nessus 18
openvas 22
debian 2
suse 3
fedora 4
securityvulns 2
mageia 2
altlinux 2
ubuntu 1
slackware 1
gentoo 1
packetstorm 1
cvelist
cvelist
CVE-2012-4412
2013-10-09 22:00:00
ubuntucve
ubuntucve
CVE-2012-4412
2013-10-09 00:00:00
debiancve
debiancve
CVE-2012-4412
2013-10-09 22:55:02
prion
prion
Integer overflow
2013-10-09 22:55:00
cve
cve
CVE-2012-4412
2013-10-09 22:55:02
exploitdb
exploitdb
GNU glibc - 'strcoll()' Routine Integer Overflow
2012-09-07 00:00:00
osv
osv
eglibc - security update
2015-11-26 00:00:00
eglibc - security update
2015-03-06 00:00:00
glibc-2.24-2.3 on GA media
2024-06-15 00:00:00
nessus
nessus
Fedora 19 : glibc-2.17-14.fc19 (2013-15316)
2013-08-28 00:00:00
Debian DLA-350-1 : eglibc security update
2015-11-30 00:00:00
SUSE SLES10 Security Update : glibc (SUSE-SU-2014:1119-1)
2015-05-20 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-350-1)
2023-03-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1119-1)
2021-06-09 00:00:00
Fedora Update for glibc FEDORA-2013-15316
2013-09-02 00:00:00
debian
debian
[SECURITY] [DLA 350-1] eglibc security update
2015-11-26 17:49:39
[SECURITY] [DLA 165-1] eglibc security update
2015-03-06 15:39:53
suse
suse
Security update for glibc (important)
2014-09-12 02:04:23
Security update for glibc (important)
2014-09-12 06:04:16
Security update for glibc (important)
2014-09-15 19:04:18
fedora
fedora
[SECURITY] Fedora 19 Update: glibc-2.17-14.fc19
2013-08-27 23:29:45
[SECURITY] Fedora 19 Update: glibc-2.17-13.fc19
2013-08-22 00:50:09
[SECURITY] Fedora 19 Update: glibc-2.17-18.fc19
2013-09-28 00:07:09
securityvulns
securityvulns
glibc security vulnerabilities
2013-12-01 00:00:00
[ MDVSA-2013:284 ] glibc
2013-12-01 00:00:00
mageia
mageia
Updated glibc packages fix security vulnerabilities
2015-05-06 18:16:01
Updated glibc package fixes security vulnerabilities
2013-11-22 22:44:49
altlinux
altlinux
Security fix for the ALT Linux 9 package glibc version 6:2.17-alt6
2014-01-11 00:00:00
Security fix for the ALT Linux 7 package glibc version 6:2.17-alt6
2014-01-11 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2013-10-21 00:00:00
slackware
slackware
[slackware-security] glibc
2014-10-24 05:36:04
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2015-03-08 00:00:00
packetstorm
packetstorm
WAGO 852 Industrial Managed Switch Series Code Execution / Hardcoded Credentials
2019-06-13 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.8

Confidence

High

EPSS

0.046

Percentile

92.6%

JSON
Related for NVD:CVE-2012-4412
cvelist1ubuntucve1debiancve1prion1cve1exploitdb1osv3nessus18openvas22debian2suse3fedora4securityvulns2mageia2altlinux2ubuntu1slackware1gentoo1packetstorm1