Sploitus

CVE-2012-0864

4 known exploits for CVE-2012-0864

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.

Affected products
Centos, Red Hat, Suse, Glibc
Gnu Glibc
= 2.14
Fix
Available
CVSS 2.0
6.8 MEDIUM
EPSS
2.7% (85th percentile)
Weakness
CWE-189
NVD status
Modified
Published
2013-05-02
CVE-2012-0864 at NVD
Authoritative description, scoring and affected products

4 known exploits for CVE-2012-0864

Proof-of-concept code and exploit modules indexed by Sploitus

sudo 1.8.0-1.8.3p1 (sudo_debug) - Root Exploit + glibc FORTIFY_SOURCE Bypass
2014-07-01 RootSEEBUG
Sudo v1.8.0-1.8.3p1 (sudo_debug) - Root Exploit
2013-05-01 aeonZDTC
sudo 1.8.0 1.8.3p1 - sudo_debug glibc FORTIFY_SOURCE Bypass + Privilege Escalation
2013-05-01 aeonEXPLOITPACKC
sudo 1.8.0 < 1.8.3p1 - 'sudo_debug' glibc FORTIFY_SOURCE Bypass + Privilege Escalation
2013-05-01 aeonEXPLOITDBC