Vulnerability identifier: #VU42856
Vulnerability risk: Medium
CVSSv4.0: 5.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/U:Green]
CVE-ID:
CWE-ID:
CWE-20
Exploitation vector: Network
Exploit availability: Yes
Vulnerable software:
Glibc
Universal components / Libraries /
Libraries used by multiple products
Vendor: GNU
Description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Glibc: 2.0 - 2.13
External links
https://dividead.wordpress.com/2009/06/01/glibc-timezone-integer-overflow/
https://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html
https://sourceware.org/git/?p=glibc.git;a=commit;h=97ac2654b2d831acaa18a2b018b0736245903fd2
https://sourceware.org/ml/libc-alpha/2011-12/msg00037.html
https://bugzilla.redhat.com/show_bug.cgi?id=761245
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.