Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

SUSE Linux 11 SP1: 2014:1122-1 Important: glibc Buffer Overflow

suse
Calendar Grey September 12, 2014
Scroller Suse
Important SUSE patch for glibc fixes several problems, addressing privilege escalation and buffer overflow flaws.
An update that solves 7 vulnerabilities and has 6 fixes is An update that solves 7 vulnerabilities and has 6 fixes is An update that solves 7 vulnerabilities and has 6 fixes is now...

Summary

This glibc update fixes a critical privilege escalation vulnerability and the following security and non-security issues: * bnc#892073: An off-by-one error leading to a heap-based buffer overflow was found in __gconv_translit_find(). An exploit that targets the problem is publicly available. (CVE-2014-5119) * bnc#886416: Avoid redundant shift character in iconv output at block boundary. * bnc#883022: Initialize errcode in sysdeps/unix/opendir.c. * bnc#882600: Copy filename argument in posix_spawn_file_actions_addopen. (CVE-2014-4043) * bnc#864081: Take lock in pthread_cond_wait cleanup handler only when needed. * bnc#843735: Don't crash on unresolved weak symbol reference. * bnc#839870: Fix integer overflows in malloc. (CVE-2013-4332)

References

#750741 #779320 #801246 #830268 #834594 #836746

#839870 #843735 #864081 #882600 #883022 #886416

#892073

Cross- CVE-2012-4412 CVE-2013-0242 CVE-2013-4237

CVE-2013-4332 CVE-2013-4788 CVE-2014-4043

CVE-2014-5119

Affected Products:

SUSE Linux Enterprise Server 11 SP1 LTSS

https://www.suse.com/security/cve/CVE-2012-4412.html

https://www.suse.com/security/cve/CVE-2013-0242.html

https://www.suse.com/security/cve/CVE-2013-4237.html

https://www.suse.com/security/cve/CVE-2013-4332.html

https://www.suse.com/security/cve/CVE-2013-4788.html

https://www.suse.com/security/cve/CVE-2014-4043.html

https://www.suse.com/security/cve/CVE-2014-5119.html

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:1122-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.