Ubuntu 12.04/10.04 USN-2485-1 Moderate: GNU C Library Buffer Overflow

ubuntu

January 27, 2015

The GNU C Library could be made to crash or run programs.

Summary

The GNU C Library could be made to crash or run programs.

Software Description:

- eglibc: GNU C Library

Details:

It was discovered that a buffer overflow existed in the gethostbyname

and gethostbyname2 functions in the GNU C Library. An attacker could

use this issue to execute arbitrary code or cause an application crash,

resulting in a denial of service.

Topics Covered

security advisory denial of service buffer overflow Ubuntu glibc crash

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  libc6                           2.15-0ubuntu10.10

Ubuntu 10.04 LTS:
  libc6                           2.11.1-0ubuntu7.20

After a standard system update you need to reboot your computer to make
all the necessary changes.