Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

SUSE Linux 10 SP3: 2014:1128-1 Important: glibc Privilege Escalation

suse
Calendar Grey September 15, 2014
Scroller Suse
SUSE Security Patch for glibc addresses severe flaws including privilege escalation and stack overflow vulnerabilities.
An update that solves 6 vulnerabilities and has 5 fixes is An update that solves 6 vulnerabilities and has 5 fixes is An update that solves 6 vulnerabilities and has 5 fixes is now...

Summary

This glibc update fixes a critical privilege escalation problem and the following security and non-security issues: * bnc#892073: An off-by-one error leading to a heap-based buffer overflow was found in __gconv_translit_find(). An exploit that targets the problem is publicly available. (CVE-2014-5119) * bnc#882600: Copy filename argument in posix_spawn_file_actions_addopen. (CVE-2014-4043) * bnc#860501: Use O_LARGEFILE for utmp file. * bnc#842291: Fix typo in glibc-2.5-dlopen-lookup-race.diff. * bnc#839870: Fix integer overflows in malloc. (CVE-2013-4332) * bnc#834594: Fix readdir_r with long file names. (CVE-2013-4237) * bnc#824639: Drop lock before calling malloc_printerr. * bnc#801246: Fix buffer overrun in regexp matcher. (CVE-2013-0242)

Topics%20covered

Topics Covered

security advisory buffer overflow critical privilege escalation important glibc SUSE Linux

References

#779320 #801246 #824639 #834594 #839870 #842291

#860501 #882600 #892073 #894553 #894556

Cross- CVE-2012-4412 CVE-2013-0242 CVE-2013-4237

CVE-2013-4332 CVE-2014-4043 CVE-2014-5119

Affected Products:

SUSE Linux Enterprise Server 10 SP3 LTSS

https://www.suse.com/security/cve/CVE-2012-4412.html

https://www.suse.com/security/cve/CVE-2013-0242.html

https://www.suse.com/security/cve/CVE-2013-4237.html

https://www.suse.com/security/cve/CVE-2013-4332.html

https://www.suse.com/security/cve/CVE-2014-4043.html

https://www.suse.com/security/cve/CVE-2014-5119.html

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:1128-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow critical privilege escalation important glibc SUSE Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.