Skip to content
OpenAdvisories
Unscored DLA-165-1 18 CVEs

eglibc - security update

Published Mar 6, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 eglibc 2.11.3-4+deb6u5

Vulnerabilities 18

  • Unscored —

    scanf and related functions in glibc before 2.15 allow local users to cause a denial of service (segmentation fault) vi…

  • Unscored —

    The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not …

  • Unscored —

    The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions do…

  • Unscored —
    CVE-2012-3480 Public exploit

    Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related fun…

  • Unscored —
    CVE-2012-4412 Public exploit EPSS 18%

    Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-depend…

  • Unscored —

    Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows con…

  • Unscored —

    Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2…

  • Unscored —

    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or l…

  • Unscored —

    sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers…

  • Unscored —

    Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-…

  • Unscored —

    The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to caus…

  • Unscored —

    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or l…

  • Unscored —
    CVE-2013-4788 Public exploit EPSS 11%

    The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGL…

  • Unscored —

    The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse fil…

  • Unscored —

    The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-de…

  • Unscored —

    The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with t…

  • Unscored —

    The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consid…

  • Unscored —

    The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consid…