Total vulnerabilities in the database
Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.
| Software | From | Fixed in |
|---|---|---|
| gnu / glibc | 2.1.2 | 2.1.2.x |
| gnu / glibc | 2.0.5 | 2.0.5.x |
| gnu / glibc | 2.0.6 | 2.0.6.x |
| gnu / glibc | 2.1.1 | 2.1.1.x |
| gnu / glibc | 2.0.3 | 2.0.3.x |
| gnu / glibc | 2.0 | 2.0.x |
| gnu / glibc | 2.13 | 2.13.x |
| gnu / glibc | 2.1.1.6 | 2.1.1.6.x |
| gnu / glibc | 2.1 | 2.1.x |
| gnu / glibc | 2.1.9 | 2.1.9.x |
| gnu / glibc | 2.0.1 | 2.0.1.x |
| gnu / glibc | 2.0.4 | 2.0.4.x |
| gnu / glibc | 2.0.2 | 2.0.2.x |
| gnu / glibc | 2.1.3 | 2.1.3.x |
| gnu / glibc | - | 2.14.x |