Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Ubuntu 8.04 LTS: USN-1589-2 High: Glibc Regression Fix for DoS

ubuntu
Calendar Grey December 17, 2012
Scroller Ubuntu
An update to the GNU C Library in Ubuntu resolves significant vulnerabilities highlighted in USN-1589-1, reinforcing the safety and reliability of the system.
USN-1589-1 exposed a regression in the GNU C Library floating point parser.

Summary

USN-1589-1 exposed a regression in the GNU C Library floating point parser.

Software Description:

- glibc: GNU C Library

Details:

USN-1589-1 fixed vulnerabilities in the GNU C Library. One of the updates

exposed a regression in the floating point parser. This update fixes the

problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that positional arguments to the printf() family

of functions were not handled properly in the GNU C Library. An

attacker could possibly use this to cause a stack-based buffer

overflow, creating a denial of service or possibly execute arbitrary

code. (CVE-2012-3404, CVE-2012-3405, CVE-2012-3406)

It was discovered that multiple integer overflows existed in the

strtod(), strtof() and strtold() functions in the GNU C Library. An

attacker could possibly use this to trigger a stack-based buffer

overflow, creating a denial of service or possibly execute arbitrary

code. (CVE-2012-3480)

Topics%20covered

Topics Covered

security advisory denial of service glibc ubuntu regression fix

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 8.04 LTS:
  libc6                           2.7-10ubuntu8.3

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1589-1

CVE-2012-3480

Severity
important
Lowest
Low
Medium
High
Critical

December 17, 2012

Topics%20covered

Topics Covered

security advisory denial of service glibc ubuntu regression fix

Package Information

https://launchpad.net/ubuntu/+source/glibc/2.7-10ubuntu8.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.