Red Hat Security Advisory: glibc security update
Updated glibc packages are available which fix a buffer overflow in the XDR decoder and two vulnerabilities in the resolver functions. [updated 8 aug 2002] Updated packages have been made available, as the original errata introduced a bug which could cause calloc() to crash on 32-bit platforms when passed a size of 0. These updated errata packages contain a patch to correct this bug.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2002-0391US | critical9.8 | — | ||
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execu… | ||||
| CVE-2002-0684US | high7.5 | — | ||
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious D… | ||||
| CVE-2002-0651US | high7.5 | — | ||
Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly e… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://online.securityfocus.com/archive/1/285308external
- http://sources.redhat.com/ml/libc-hacker/2002-08/msg00093.htmlexternal
- http://www.cert.org/advisories/CA-2002-19.htmlexternal
- https://access.redhat.com/errata/RHSA-2002:167self
- https://access.redhat.com/security/updates/classification/#importantexternal
- Canonical URLself
Behebungen (3)
- BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:167 - BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:167 - BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:167
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan