LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Advisory Watch: September 26th, 2014
Linux Security Week: September 22nd, 2014
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Mandriva: 2013:283: glibc Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Mandrake Updated glibc packages fixes the following security issues: Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary [More...]
 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2013:283
 http://www.mandriva.com/en/support/security/
 _______________________________________________________________________

 Package : glibc
 Date    : November 25, 2013
 Affected: Business Server 1.0
 _______________________________________________________________________

 Problem Description:

 Updated glibc packages fixes the following security issues:
 
 Integer overflow in string/strcoll_l.c in the GNU C Library (aka
 glibc or libc6) 2.17 and earlier allows context-dependent attackers
 to cause a denial of service (crash) or possibly execute arbitrary
 code via a long string, which triggers a heap-based buffer overflow
 (CVE-2012-4412).
 
 Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library
 (aka glibc or libc6) 2.17 and earlier allows context-dependent
 attackers to cause a denial of service (crash) or possibly execute
 arbitrary code via a long string that triggers a malloc failure and
 use of the alloca function (CVE-2012-4424).
 
 pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not
 properly check permissions for tty files, which allows local users
 to change the permission on the files and obtain access to arbitrary
 pseudo-terminals by leveraging a FUSE file system (CVE-2013-2207).
 NOTE! This is fixed by removing pt_chown wich may break chroots if
 their devpts was not mounted correctly (make sure to mount the devpts
 correctly with gid=5).
 
 sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6)
 2.18 and earlier allows context-dependent attackers to cause a
 denial of service (out-of-bounds write and crash) or possibly
 execute arbitrary code via a crafted (1) NTFS or (2) CIFS image
 (CVE-2013-4237).
 
 Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka
 glibc or libc6) 2.18 and earlier allow context-dependent attackers to
 cause a denial of service (heap corruption) via a large value to the
 (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5)
 aligned_alloc functions (CVE-2013-4332).
 
 A stack (frame) overflow flaw, which led to a denial of service
 (application crash), was found in the way glibc's getaddrinfo()
 function processed certain requests when called with AF_INET6. A
 similar flaw to CVE-2013-1914, this affects AF_INET6 rather than
 AF_UNSPEC (CVE-2013-4458).
 
 The PTR_MANGLE implementation in the GNU C Library (aka glibc or
 libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGLIBC) does not
 initialize the random value for the pointer guard, which makes it
 easier for context- dependent attackers to control execution flow by
 leveraging a buffer-overflow vulnerability in an application and using
 the known zero value pointer guard to calculate a pointer address
 (CVE-2013-4788).
 
 Other fixes in this update:
 - Correct the processing of '\x80' characters in crypt_freesec.c
 - fix typo in nscd.service
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4424
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2207
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4458
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4788
 http://advisories.mageia.org/MGASA-2013-0340.html
 _______________________________________________________________________

 Updated Packages:

 Mandriva Business Server 1/X86_64:
 55e626f90fc3cf28ab6ec66ab762b12f  mbs1/x86_64/glibc-2.14.1-12.2.mbs1.x86_64.rpm
 fece70755163abb58742056a4f4e3773  mbs1/x86_64/glibc-devel-2.14.1-12.2.mbs1.x86_64.rpm
 a84eb58b428b2413863c8b90af89ac25  mbs1/x86_64/glibc-doc-2.14.1-12.2.mbs1.noarch.rpm
 f1630ad8a642250f4d067b207cd86e91  mbs1/x86_64/glibc-doc-pdf-2.14.1-12.2.mbs1.noarch.rpm
 80aae07c11abca7d1aef77c8c6bb85d2  mbs1/x86_64/glibc-i18ndata-2.14.1-12.2.mbs1.x86_64.rpm
 681d1f18d54f927d1468d01431cdeee4  mbs1/x86_64/glibc-profile-2.14.1-12.2.mbs1.x86_64.rpm
 73c26fe8c0598539cbd8600b6ae5426c  mbs1/x86_64/glibc-static-devel-2.14.1-12.2.mbs1.x86_64.rpm
 6c966f5e50d38d244ed23595035be72d  mbs1/x86_64/glibc-utils-2.14.1-12.2.mbs1.x86_64.rpm
 d6b26cd43c42324daf59e75eabbc2db1  mbs1/x86_64/nscd-2.14.1-12.2.mbs1.x86_64.rpm 
 912e1f62eb8aeb0dd8745c83c1c97bb9  mbs1/SRPMS/glibc-2.14.1-12.2.mbs1.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/en/support/security/advisories/

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________
 
< Prev   Next >
    
Partner

 

Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
Shellshock makes Heartbleed look insignificant
Hacker Group Lizard Squad Takes Down Destiny, Call of Duty, FIFA And More
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2014 Guardian Digital, Inc. All rights reserved.