Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2012-4412

Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.

  • Published: Oct 10, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-4412
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
gnu / glibc 2.1.2 2.1.2.x
gnu / glibc 2.11 2.11.x
gnu / glibc 2.0.5 2.0.5.x
gnu / glibc 2.0.6 2.0.6.x
gnu / glibc 2.10.1 2.10.1.x
gnu / glibc 2.1.1 2.1.1.x
gnu / glibc 2.14 2.14.x
gnu / glibc 2.0.3 2.0.3.x
gnu / glibc 2.0 2.0.x
gnu / glibc 2.13 2.13.x
gnu / glibc 2.1.1.6 2.1.1.6.x
gnu / glibc 2.1 2.1.x
gnu / glibc 2.1.9 2.1.9.x
gnu / glibc 2.12.1 2.12.1.x
gnu / glibc 2.0.1 2.0.1.x
gnu / glibc 2.14.1 2.14.1.x
gnu / glibc 2.11.2 2.11.2.x
gnu / glibc 2.0.4 2.0.4.x
gnu / glibc 2.0.2 2.0.2.x
gnu / glibc 2.16 2.16.x
gnu / glibc - 2.17.x
gnu / glibc 2.11.3 2.11.3.x
gnu / glibc 2.11.1 2.11.1.x
gnu / glibc 2.1.3 2.1.3.x
gnu / glibc 2.15 2.15.x
gnu / glibc 2.12.2 2.12.2.x