Univention Bugzilla – Full Text Bug Listing |
Summary: | eglibc: Multiple issues (4.0) | ||
---|---|---|---|
Product: | UCS | Reporter: | Arvid Requate <requate> |
Component: | Security updates | Assignee: | Arvid Requate <requate> |
Status: | CLOSED FIXED | QA Contact: | Felix Botner <botner> |
Severity: | normal | ||
Priority: | P4 | CC: | botner |
Version: | UCS 4.0 | Flags: | requate:
Patch_Available+
|
Target Milestone: | UCS 4.0-4-errata | ||
Hardware: | Other | ||
OS: | Linux | ||
URL: | https://github.com/fjserna/CVE-2015-7547 | ||
What kind of report is it?: | --- | What type of bug is this?: | --- |
Who will be affected by this bug?: | --- | How will those affected feel about the bug?: | --- |
User Pain: | Enterprise Customer affected?: | ||
School Customer affected?: | ISV affected?: | ||
Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
Ticket number: | Bug group (optional): | Security | |
Max CVSS v3 score: | |||
Bug Depends on: | 40022 | ||
Bug Blocks: |
Description
Arvid Requate
2015-04-30 17:38:25 CEST
Still unfixed because classified as "Minor issue" by Debian: * Insecure pseudotty ownership changes in pt_chown (CVE-2013-2207) * Denial of service in nss_files (CVE-2014-8121) CVE-2011-5320 is still unfixed because "The issue was present since the dawn of times" (or whatever), patch available upstream but might be too intrusive. * buffer overflow in gethostbyname_r and related functions (CVE-2015-1781) CVE-2015-3408 above is invalid Upstream Debian package version 2.13-38+deb7u10 fixes these issues: * Denial of service in nss_files (CVE-2014-8121) * buffer overflow in gethostbyname_r and related functions (CVE-2015-1781) * getaddrinfo, when processing AF_UNSPEC queries (for dual A/AAAA lookups), could mismanage its internal buffers, leading to a stack-based buffer overflow and arbitrary code execution. This vulnerability affects most applications which perform host name resolution using getaddrinfo, including system services (CVE-2015-7547) * If an invalid separated time value is passed to strftime, the strftime function could crash or leak information. No affected applications are known (CVE-2015-8776) * LD_POINTER_GUARD not ignored for SUID programs, enabling an unintended bypass of a security feature (CVE-2015-8777) * The rarely-used hcreate and hcreate_r functions did not check the size argument properly, leading to a crash (denial of service) for certain arguments. No impacted applications are known at this time (CVE-2015-8778) * The catopen function contains several unbound stack allocations (stack overflows), causing it the crash the process (denial of service). No applications where this issue has a security impact are currently known (CVE-2015-8779) The upstream package has been imported and built without any additional patches. Advisory: eglibc.yaml reproducible with 2.13-38.25.2015082816 (CVE-2015-7547-client) OK - CVE-2015-7547-client OK with 2.13-38.28.2016021618 OK - ucs-test OK - eglibc.yaml |