Lucene search

K
osvGoogleOSV:DLA-350-1
HistoryNov 26, 2015 - 12:00 a.m.

eglibc - security update

2015-11-2600:00:00
Google
osv.dev
17

EPSS

0.046

Percentile

92.6%

The strxfrm() function is vulnerable to integer overflows when computing
memory allocation sizes (similar to CVE-2012-4412). Furthermore since
it fallbacks to use alloca() when malloc() fails, it is vulnerable to
stack-based buffer overflows (similar to CVE-2012-4424).

Those issues have been fixed in Debian 6 Squeeze with eglibc
2.11.3-4+deb6u8. We recommend that you upgrade libc6 and other
packages provided by eglibc.