glibc has been updated to fix four security issues.

These security issues were fixed :

  - CVE-2014-7817: The wordexp function in GNU C Library     (aka glibc) 2.21 did not enforce the WRDE_NOCMD flag,     which allowed context-dependent attackers to execute     arbitrary commands, as demonstrated by input containing     '$((`...`))' (bnc#906371).

  - CVE-2015-1472: Heap buffer overflow in glibc swscanf     (bnc#916222).

  - CVE-2014-9402: Denial of service in getnetbyname     function (bnc#910599).

  - CVE-2013-7423: Getaddrinfo() writes DNS queries to     random file descriptors under high load (bnc#915526).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

glibc has been updated to fix four security issues :

  - CVE-2014-0475: Directory traversal in locale environment     handling (bnc#887022)

  - CVE-2014-7817: wordexp failed to honour WRDE_NOCMD     (bsc#906371)

  - CVE-2014-9402: Avoid infinite loop in nss_dns     getnetbyname (bsc#910599)

  - CVE-2015-1472: Fixed buffer overflow in wscanf     (bsc#916222)

This non-security issue has been fixed :

  - Fix missing zero termination (bnc#918233)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201602-02 (GNU C Library: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the GNU C Library:
      The Google Security Team and Red Hat discovered a stack-based buffer         overflow in the send_dg() and send_vc() functions due to a buffer         mismanagement when getaddrinfo() is called with AF_UNSPEC         (CVE-2015-7547).
      The strftime() function access invalid memory when passed         out-of-range data, resulting in a crash (CVE-2015-8776).
      An integer overflow was found in the __hcreate_r() function         (CVE-2015-8778).
      Multiple unbounded stack allocations were found in the catopen()         function (CVE-2015-8779).
    Please review the CVEs referenced below for additional vulnerabilities       that had already been fixed in previous versions of sys-libs/glibc, for       which we have not issued a GLSA before.
  Impact :

    A remote attacker could exploit any application which performs host name       resolution using getaddrinfo() in order to execute arbitrary code or       crash the application. The other vulnerabilities can possibly be       exploited to cause a Denial of Service or leak information.
  Workaround :

    A number of mitigating factors for CVE-2015-7547 have been identified.
      Please review the upstream advisory and references below.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Update fix for CVE-2015-7547 (#1296028).

  - Create helper threads with enough stack for POSIX AIO     and timers (#1301625).

  - Fix CVE-2015-7547: getaddrinfo stack-based buffer     overflow (#1296028).

  - Support loading more libraries with static TLS     (#1291270).

  - Check for NULL arena pointer in _int_pvalloc (#1256890).

  - Don't change no_dyn_threshold on mallopt failure     (#1256891).

  - Unlock main arena after allocation in calloc (#1256812).

  - Enable robust malloc change again (#1256812).

  - Fix perturbing in malloc on free and simply perturb_byte     (#1256812).

  - Don't fall back to mmap prematurely (#1256812).

  - The malloc deadlock avoidance support has been     temporarily removed since it triggers deadlocks in     certain applications (#1244002).

  - Fix ruserok check to reject, not skip, negative user     checks (#1217186).

  - Optimize ruserok function for large ~/.rhosts     (#1217186).

  - Fix crash in valloc due to the backtrace deadlock fix     (#1207236).

  - Fix buffer overflow in gethostbyname_r with misaligned     buffer (#1209376, CVE-2015-1781).

  - Avoid deadlock in malloc on backtrace (#1066724).

  - Support running applications that use Intel AVX-512     (#1195453).

  - Silence logging of record type mismatch for DNSSEC     records (#1088301).

  - Shrink heap on free when vm.overcommit_memory == 2     (#867679).

  - Enhance nscd to detect any configuration file changes     (#859965).

  - Fix __times handling of EFAULT when buf is NULL     (#1124204).

  - Fix memory leak with dlopen and thread-local storage     variables (#978098).

  - Prevent getaddrinfo from writing DNS queries to random     fd (CVE-2013-7423, - Implement userspace half of in6.h     header coordination (#1053178).

  - Correctely size relocation cache used by profiler     (#1144132).

  - Fix reuse of cached stack leading to bounds overrun of     DTV (#1116050).

  - Return failure in getnetgrent only when all netgroups     have been searched (#1085312).

  - Fix valgrind warning in nscd_stats (#1091915).

  - Initialize xports array (#1159167).

  - Fix tst-default-attr test to not fail on powerpc     (#1023306).

  - Fix parsing of numeric hosts in gethostbyname_r     (CVE-2015-0235, #1183534).

  - Fix typo in nscd/selinux.c (#1125307).

  - Actually run test-iconv modules (#1176907).

  - Fix recursive dlopen (#1154563).

  - Fix crashes on invalid input in IBM gconv modules     (CVE-2014-6040, #1172044).

  - Fix wordexp to honour WRDE_NOCMD (CVE-2014-7817,     #1171296).

  - Fix typo in res_send and res_query (#rh1138769).

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
83701	SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2015:0526-1)	Nessus	SuSE Local Security Checks	2015/5/20	2021/1/6	high
83704	SUSE SLES10 Security Update : glibc (SUSE-SU-2015:0550-1)	Nessus	SuSE Local Security Checks	2015/5/20	2021/1/6	high
88822	GLSA-201602-02 : GNU C Library: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/2/18	2024/6/18	critical
88783	OracleVM 3.3 : glibc (OVMSA-2016-0013) (GHOST)	Nessus	OracleVM Local Security Checks	2016/2/17	2024/6/18	high

检测

插件搜索

high

high

critical

high