Bug#870648: glibc: CVE-2017-12133: Use-after-free in error path in clntudp_call

To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Bug#870648: glibc: CVE-2017-12133: Use-after-free in error path in clntudp_call
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Thu, 03 Aug 2017 21:42:48 +0200
Message-id: <[🔎] 150178936840.23955.8714900679679939406.reportbug@eldamar.local>
Reply-to: Salvatore Bonaccorso <carnil@debian.org>, 870648@bugs.debian.org

Source: glibc
Version: 2.22-10
Severity: important
Tags: upstream security patch fixed-upstream
Forwarded: https://sourceware.org/bugzilla/show_bug.cgi?id=21115
Control: found -1 2.19-18+deb8u5

Hi,

the following vulnerability was published for glibc.

CVE-2017-12133[0]:
Use-after-free in error path in clntudp_call

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-12133
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12133
[1] https://sourceware.org/bugzilla/show_bug.cgi?id=21115

Regards,
Salvatore

Reply to:

Follow-Ups:
- Processed: glibc: CVE-2017-12133: Use-after-free in error path in clntudp_call
  - From: owner@bugs.debian.org (Debian Bug Tracking System)
- Bug#870648: marked as done (glibc: CVE-2017-12133: Use-after-free in error path in clntudp_call)
  - From: owner@bugs.debian.org (Debian Bug Tracking System)

Prev by Date: [glibc] branch glibc-2.25 updated (b86a08d -> 12d4a31)
Next by Date: Processed: glibc: CVE-2017-12133: Use-after-free in error path in clntudp_call
Previous by thread: [glibc] 01/01: testsuite-xfail-debian.mk: update for hurd-i386
Next by thread: Processed: glibc: CVE-2017-12133: Use-after-free in error path in clntudp_call
Index(es):
- Date
- Thread