CVE-2012-4412
EPSS 16.7%
描述
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.
如何修補 CVE-2012-4412
要修補 CVE-2012-4412,請將受影響套件升級到下列已修補版本。
- Debian/glibc—升級至 2.17-94 或更新版本
CVE-2012-4412 正在被利用嗎?
中等 — EPSS 為 16.7%,可持續追蹤但非最高優先。
受影響套件(1)
- from 0, < 2.17-94