CVE-2012-3405 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-3405 Interim 1 29 2023-02-10T03:19:31Z current 2021-05-30T13:04:55Z 2023-02-10T03:19:31Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-3405 The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2012-December/000315.html E-Mail link for SUSE-SU-2012:1666-1 https://lists.suse.com/pipermail/sle-security-updates/2013-July/000539.html E-Mail link for SUSE-SU-2013:1251-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server for SAP Applications 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 glibc glibc-2.11.1-0.46.1 glibc-2.11.1-0.50.1 glibc-2.11.3-17.43.1 glibc-32bit-2.11.1-0.46.1 glibc-32bit-2.11.1-0.50.1 glibc-32bit-2.11.3-17.43.1 glibc-32bit-2.11.3-17.45.53.1 glibc-devel-2.11.1-0.46.1 glibc-devel-2.11.1-0.50.1 glibc-devel-2.11.3-17.43.1 glibc-devel-32bit-2.11.1-0.46.1 glibc-devel-32bit-2.11.1-0.50.1 glibc-devel-32bit-2.11.3-17.43.1 glibc-devel-32bit-2.11.3-17.45.53.1 glibc-html-2.11.1-0.46.1 glibc-html-2.11.1-0.50.1 glibc-html-2.11.3-17.43.1 glibc-i18ndata-2.11.1-0.46.1 glibc-i18ndata-2.11.1-0.50.1 glibc-i18ndata-2.11.3-17.43.1 glibc-info-2.11.1-0.46.1 glibc-info-2.11.1-0.50.1 glibc-info-2.11.3-17.43.1 glibc-locale-2.11.1-0.46.1 glibc-locale-2.11.1-0.50.1 glibc-locale-2.11.3-17.43.1 glibc-locale-32bit-2.11.1-0.46.1 glibc-locale-32bit-2.11.1-0.50.1 glibc-locale-32bit-2.11.3-17.43.1 glibc-locale-32bit-2.11.3-17.45.53.1 glibc-locale-x86-2.11.3-17.45.49.1 glibc-profile-2.11.1-0.46.1 glibc-profile-2.11.1-0.50.1 glibc-profile-2.11.3-17.43.1 glibc-profile-32bit-2.11.1-0.46.1 glibc-profile-32bit-2.11.1-0.50.1 glibc-profile-32bit-2.11.3-17.45.53.1 glibc-profile-x86-2.11.3-17.45.49.1 glibc-x86-2.11.3-17.45.49.1 libxcrypt-3.0.3-0.4.1 libxcrypt-32bit-3.0.3-0.4.1 nscd-2.11.1-0.46.1 nscd-2.11.1-0.50.1 nscd-2.11.3-17.43.1 pam-modules-11-1.18.1 pam-modules-32bit-11-1.18.1 pwdutils-3.2.8-0.4.1 pwdutils-plugin-audit-3.2.8-0.4.1 glibc-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 glibc-32bit-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 glibc-devel-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 glibc-devel-32bit-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 glibc-i18ndata-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 glibc-locale-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 glibc-locale-32bit-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 nscd-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 glibc-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-32bit-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-devel-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-devel-32bit-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-html-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-i18ndata-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-info-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-locale-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-locale-32bit-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-profile-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-profile-32bit-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS nscd-2.11.1-0.50.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS glibc-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-32bit-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-devel-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-devel-32bit-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-html-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-i18ndata-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-info-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-locale-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-locale-32bit-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-profile-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-profile-32bit-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libxcrypt-3.0.3-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libxcrypt-32bit-3.0.3-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA nscd-2.11.1-0.46.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA pam-modules-11-1.18.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA pam-modules-32bit-11-1.18.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA pwdutils-3.2.8-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA pwdutils-plugin-audit-3.2.8-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA glibc-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-32bit-2.11.3-17.45.53.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-devel-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-devel-32bit-2.11.3-17.45.53.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-html-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-i18ndata-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-info-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-locale-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-locale-32bit-2.11.3-17.45.53.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-locale-x86-2.11.3-17.45.49.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-profile-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-profile-32bit-2.11.3-17.45.53.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-profile-x86-2.11.3-17.45.49.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-x86-2.11.3-17.45.49.1 as a component of SUSE Linux Enterprise Server 11 SP2 nscd-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server 11 SP2 glibc-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-32bit-2.11.3-17.45.53.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-devel-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-devel-32bit-2.11.3-17.45.53.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-html-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-i18ndata-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-info-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-locale-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-locale-32bit-2.11.3-17.45.53.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-locale-x86-2.11.3-17.45.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-profile-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-profile-32bit-2.11.3-17.45.53.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-profile-x86-2.11.3-17.45.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-x86-2.11.3-17.45.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 nscd-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 glibc-html-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 glibc-info-2.11.3-17.43.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 glibc as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata glibc as a component of SUSE Linux Enterprise Server 11 SP4 LTSS The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404. CVE-2012-3405 SUSE Linux Enterprise Desktop 11 SP2:glibc-2.11.3-17.43.1 SUSE Linux Enterprise Desktop 11 SP2:glibc-32bit-2.11.3-17.43.1 SUSE Linux Enterprise Desktop 11 SP2:glibc-devel-2.11.3-17.43.1 SUSE Linux Enterprise Desktop 11 SP2:glibc-devel-32bit-2.11.3-17.43.1 SUSE Linux Enterprise Desktop 11 SP2:glibc-i18ndata-2.11.3-17.43.1 SUSE Linux Enterprise Desktop 11 SP2:glibc-locale-2.11.3-17.43.1 SUSE Linux Enterprise Desktop 11 SP2:glibc-locale-32bit-2.11.3-17.43.1 SUSE Linux Enterprise Desktop 11 SP2:nscd-2.11.3-17.43.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-32bit-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-devel-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-devel-32bit-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-html-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-i18ndata-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-info-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-locale-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-locale-32bit-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-profile-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:glibc-profile-32bit-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-LTSS:nscd-2.11.1-0.50.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-32bit-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-devel-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-devel-32bit-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-html-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-i18ndata-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-info-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-locale-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-locale-32bit-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-profile-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:glibc-profile-32bit-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libxcrypt-3.0.3-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libxcrypt-32bit-3.0.3-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:nscd-2.11.1-0.46.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:pam-modules-11-1.18.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:pam-modules-32bit-11-1.18.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:pwdutils-3.2.8-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:pwdutils-plugin-audit-3.2.8-0.4.1 SUSE Linux Enterprise Server 11 SP2:glibc-2.11.3-17.43.1 SUSE Linux Enterprise Server 11 SP2:glibc-32bit-2.11.3-17.45.53.1 SUSE Linux Enterprise Server 11 SP2:glibc-devel-2.11.3-17.43.1 SUSE Linux Enterprise Server 11 SP2:glibc-devel-32bit-2.11.3-17.45.53.1 SUSE Linux Enterprise Server 11 SP2:glibc-html-2.11.3-17.43.1 SUSE Linux Enterprise Server 11 SP2:glibc-i18ndata-2.11.3-17.43.1 SUSE Linux Enterprise Server 11 SP2:glibc-info-2.11.3-17.43.1 SUSE Linux Enterprise Server 11 SP2:glibc-locale-2.11.3-17.43.1 SUSE Linux Enterprise Server 11 SP2:glibc-locale-32bit-2.11.3-17.45.53.1 SUSE Linux Enterprise Server 11 SP2:glibc-locale-x86-2.11.3-17.45.49.1 SUSE Linux Enterprise Server 11 SP2:glibc-profile-2.11.3-17.43.1 SUSE Linux Enterprise Server 11 SP2:glibc-profile-32bit-2.11.3-17.45.53.1 SUSE Linux Enterprise Server 11 SP2:glibc-profile-x86-2.11.3-17.45.49.1 SUSE Linux Enterprise Server 11 SP2:glibc-x86-2.11.3-17.45.49.1 SUSE Linux Enterprise Server 11 SP2:nscd-2.11.3-17.43.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-2.11.3-17.43.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-32bit-2.11.3-17.45.53.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-devel-2.11.3-17.43.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-devel-32bit-2.11.3-17.45.53.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-html-2.11.3-17.43.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-i18ndata-2.11.3-17.43.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-info-2.11.3-17.43.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-locale-2.11.3-17.43.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-locale-32bit-2.11.3-17.45.53.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-locale-x86-2.11.3-17.45.49.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-profile-2.11.3-17.43.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-profile-32bit-2.11.3-17.45.53.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-profile-x86-2.11.3-17.45.49.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:glibc-x86-2.11.3-17.45.49.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:nscd-2.11.3-17.43.1 SUSE Linux Enterprise Software Development Kit 11 SP2:glibc-html-2.11.3-17.43.1 SUSE Linux Enterprise Software Development Kit 11 SP2:glibc-info-2.11.3-17.43.1 SUSE Linux Enterprise Server 11 SP3 for Teradata:glibc SUSE Linux Enterprise Server 11 SP4 LTSS:glibc moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P