CVE-2012-4424 PUBLISHED CVSS 5.099999904632568 MEDIUM

Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.

EPSS 0.61% · 69.5th percentile

Risk Scores

CVSS v2.0
5.099999904632568
EPSS Score
0.61%
69.5th percentile

Affected Products

VendorProductVersions
gnuglibc2.16, 0, 2.0
n/an/an/a

Timeline

References

Open in Interactive Console →