[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <50292790.8060109@redhat.com>
Date: Mon, 13 Aug 2012 10:13:04 -0600
From: Kurt Seifried <kseifried@...hat.com>
To: oss-security@...ts.openwall.com
CC: Jan Lieskovsky <jlieskov@...hat.com>,
"Steven M. Christey" <coley@...us.mitre.org>,
"Joseph S. Myers" <joseph@...esourcery.com>, Jeff Law <law@...hat.com>
Subject: Re: CVE Request -- glibc: Integer overflows, leading
to stack-based buffer overflows in strto* related routines
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 08/13/2012 04:52 AM, Jan Lieskovsky wrote:
> Hello Kurt, Steve, vendors,
>
> multiple integer overflows, leading to stack-based buffer overflows
> were found in various stdlib functions of GNU libc (strtod, strtof,
> strtold, strtod_l and related routines). If an application, using
> the affected stdlib functions, did not perform user-level
> sanitization of provided inputs, a local attacker could use this
> flaw to cause such an application to crash or, potentially, execute
> arbitrary code with the privileges of the user running the
> application.
>
> Upstream bug report: [1]
> http://sourceware.org/bugzilla/show_bug.cgi?id=14459
>
> Upstream patch (might not be the final one): [2]
> http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html
>
> References: [3] https://bugzilla.redhat.com/show_bug.cgi?id=847715
>
> Could you allocate a CVE id for this?
>
> Thank you && Regards, Jan. -- Jan iankko Lieskovsky / Red Hat
> Security Response Team
>
Please use CVE-2012-3480 for this issue.
- --
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=cDR/
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
