https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:23:06 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-759 certa-2012-avi-759 https://cve.radiocsirt.org/vuln/certa-2012-avi-759 https://cve.radiocsirt.org/vuln/euvd-2026-111771 EUVD-2026-111771 https://cve.radiocsirt.org/vuln/euvd-2026-111771 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3406 <p>The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not &#34;properly restrict the use of&#34; the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.</p> <p>The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not &#34;properly restrict the use of&#34; the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-3406 https://cve.radiocsirt.org/vuln/ghsa-8mj9-m673-h2gf <p>The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not &#34;properly restrict the use of&#34; the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.</p> <p>The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not &#34;properly restrict the use of&#34; the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.</p> https://cve.radiocsirt.org/vuln/ghsa-8mj9-m673-h2gf https://cve.radiocsirt.org/vuln/gsd-2012-3406 gsd-2012-3406 https://cve.radiocsirt.org/vuln/gsd-2012-3406 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10154-1 <p>glibc-2.24-2.3 on GA media</p> <p>glibc-2.24-2.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10154-1 https://cve.radiocsirt.org/vuln/rhsa-2012:1097 <p>glibc: printf() unbound alloca() usage in case of positional parameters + many format specs</p> <p>glibc: printf() unbound alloca() usage in case of positional parameters + many format specs</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1097 https://cve.radiocsirt.org/vuln/suse-su-2015:0551-1 <p>Security update for glibc</p> <p>Security update for glibc</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0551-1