Skip to content
OpenAdvisories
Unscored RHSA-2012:0125 9 CVEs

Red Hat Security Advisory: glibc security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 40

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as glibc 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::as glibc-common 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::as glibc-debuginfo 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::as glibc-debuginfo-common 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::as glibc-devel 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::as glibc-headers 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::as glibc-profile 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::as glibc-utils 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::as nptl-devel 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::as nscd 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop glibc 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop glibc-common 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop glibc-debuginfo 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop glibc-debuginfo-common 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop glibc-devel 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop glibc-headers 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop glibc-profile 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop glibc-utils 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop nptl-devel 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::desktop nscd 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es glibc 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es glibc-common 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es glibc-debuginfo 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es glibc-debuginfo-common 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es glibc-devel 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es glibc-headers 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es glibc-profile 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es glibc-utils 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es nptl-devel 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::es nscd 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws glibc 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws glibc-common 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws glibc-debuginfo 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws glibc-debuginfo-common 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws glibc-devel 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws glibc-headers 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws glibc-profile 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws glibc-utils 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws nptl-devel 0:2.3.4-2.57
Red Hat · RHEL 4 enterprise_linux:4::ws nscd 0:2.3.4-2.57

Vulnerabilities 9

  • Unscored —
    CVE-2009-5029 Public exploit

    Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denia…

    glibc Debian
  • Unscored —
    CVE-2009-5064

    ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse…

    glibc Debian
  • Unscored —
    CVE-2010-0296

    The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmo…

    glibc Debian
  • Unscored —
    CVE-2010-0830

    Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka …

    glibc Debian
  • Unscored —
    CVE-2011-1071 Public exploit EPSS 14%

    The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to e…

    glibc Debian
  • Unscored —
    CVE-2011-1089

    The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for f…

    glibc Debian
  • Unscored —
    CVE-2011-1095

    locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, whi…

    glibc Debian
  • Unscored —
    CVE-2011-1659

    Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent…

    glibc Debian
  • Unscored —
    CVE-2011-4609

    The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of servic…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=559579
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=599056
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=625893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=657009
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=681054
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=688980
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692393
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=761245
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=767299
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0125.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-5029
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-5029
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-5029
  • report
    https://access.redhat.com/security/cve/CVE-2009-5064
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-5064
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-5064
  • report
    https://access.redhat.com/security/cve/CVE-2010-0296
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0296
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0296
  • report
    https://access.redhat.com/security/cve/CVE-2010-0830
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0830
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0830
  • report
    https://access.redhat.com/security/cve/CVE-2011-1071
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1071
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1071
  • report
    https://access.redhat.com/security/cve/CVE-2011-1089
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1089
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1089
  • report
    https://access.redhat.com/security/cve/CVE-2011-1095
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1095
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1095
  • report
    https://access.redhat.com/security/cve/CVE-2011-1659
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1659
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1659
  • report
    https://access.redhat.com/security/cve/CVE-2011-4609
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4609
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4609