Red Hat Security Advisory: glibc security update
Updated glibc packages are available which fix a buffer overflow in the XDR decoder and two vulnerabilities in the resolver functions. [updated 8 aug 2002] Updated packages have been made available, as the original errata introduced a bug which could cause calloc() to crash on 32-bit platforms when passed a size of 0. These updated errata packages contain a patch to correct this bug.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2002-0391US | critical9.8 | — | ||
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execu… | ||||
| CVE-2002-0684US | high7.5 | — | ||
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious D… | ||||
| CVE-2002-0651US | high7.5 | — | ||
Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly e… | ||||
references
External citations — patches, advisories, analysis.
- http://online.securityfocus.com/archive/1/285308external
- http://sources.redhat.com/ml/libc-hacker/2002-08/msg00093.htmlexternal
- http://www.cert.org/advisories/CA-2002-19.htmlexternal
- https://access.redhat.com/errata/RHSA-2002:167self
- https://access.redhat.com/security/updates/classification/#importantexternal
- Canonical URLself
remediations (3)
- FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:167 - FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:167 - FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:167
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan