SuSE Linux, Novell SUSE Linux Enterprise Server

ソフト名：SuSE Linux 9.0, Novell SUSE Linux Enterprise Server (SLES) 10/11 (GNU C Library 2.x)

回避策：SUSE-SU-2011:0701-1, SUSE-SU-2011:0702-1, SUSE-SU-2011:0703-1, SUSE-SU-2011:0704-1にて対応

脆弱性：システムアクセス, 権限の昇格, スタックメモリ破壊, 整数オーバーフロー, クラッシュ, リモートコード実行

ソース：http://en.opensuse.org/Portal:Distribution

http://www.novell.com/products/server/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/9036470

https://hermes.opensuse.org/messages/9036471

https://hermes.opensuse.org/messages/9037214

https://hermes.opensuse.org/messages/9037844

http://secunia.com/advisories/42002/

http://secunia.com/advisories/43492/

http://secunia.com/advisories/43976/

http://secunia.com/advisories/45052/

http://secunia.com/advisories/45078/

http://secunia.com/advisories/45085/

http://dvw-j.blogspot.com/2011/03/gnu-c-library.html

http://dvw-j.blogspot.com/2011/04/gnu-c-library.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0015

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0536

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1071

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1095

CVE：CVE-2010-0015, CVE-2011-0536, CVE-2011-1071, CVE-2011-1095

危険性：Medium Risk

GNU C Library

ソフト名：GNU C Library (glibc) 2.13

回避策：あり

脆弱性：DoS攻撃, 整数オーバーフロー, クラッシュ

ソース：http://www.gnu.org/software/libc/libc.html

https://bugzilla.redhat.com/show_bug.cgi?id=681054

http://sourceware.org/bugzilla/show_bug.cgi?id=12583

http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=8126d90480fa3e0c5c5cd0d02cb1c93174b45485

http://secunia.com/advisories/43492/

http://secunia.com/advisories/44353/

http://dvw-j.blogspot.com/2011/03/gnu-c-library.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1659

CVE：CVE-2011-1659

危険性：Medium Risk

Red Hat Enterprise Linux

ソフト名：Red Hat Enterprise Linux 5 (Server)/Desktop 5/Desktop 6/HPC Node 6/Server 6/Workstation 6 (GNU C Library 2.13未満)

回避策：RHSA-2011:0412-1, RHSA-2011:0413-01にて対応

脆弱性：権限の昇格, DoS攻撃, システムアクセス, スタック破壊

ソース：http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://rhn.redhat.com/errata/RHSA-2011-0412.html

https://rhn.redhat.com/errata/RHSA-2011-0413.html

http://secunia.com/advisories/42215/

http://secunia.com/advisories/43492/

http://secunia.com/advisories/43976/

http://secunia.com/advisories/43830/

http://secunia.com/advisories/43989/

http://dvw-j.blogspot.com/2011/03/gnu-c-library.html

http://dvw-j.blogspot.com/2011/04/gnu-c-library.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3847

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0536

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1071

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1095

CVE：CVE-2010-0296, CVE-2010-3847, CVE-2011-0536, CVE-2011-1071, CVE-2011-1095

危険性：Medium Risk

GNU C Library

ソフト名：GNU C Library (glibc) 2.13未満

回避策：アップデートにて対応

脆弱性：権限の昇格

ソース：http://www.gnu.org/software/libc/libc.html

http://sourceware.org/bugzilla/show_bug.cgi?id=11904

http://secunia.com/advisories/43976/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1095

CVE：CVE-2011-1095

危険性：Low Risk

GNU C Library

ソフト名：GNU C Library (glibc) 2.12.2未満
回避策：アップデート, GNU C Library Bug #11883/#48733にて対応
脆弱性：DoS攻撃, システムアクセス, スタックメモリ破壊
ソース：http://www.gnu.org/software/libc/libc.html
http://sourceware.org/bugzilla/show_bug.cgi?id=11883
http://code.google.com/p/chromium/issues/detail?id=48733
http://secunia.com/advisories/43492/
危険性：Medium Risk

GNU C Library

ソフト名：GNU C Library (glibc) 2.12.1
回避策：未対応
脆弱性：DoS攻撃, アプリケーションのクラッシュ
ソース：http://www.gnu.org/software/libc/libc.html
http://www.kb.cert.org/vuls/id/912279
http://secunia.com/advisories/42547/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4051
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4052
CVE：CVE-2010-4051, CVE-2010-4052
危険性：Low Risk