CVE-2009-5029

Name of the Vulnerable Software and Affected Versions glibc versions 2.3.4 glibc versions prior to 2.15-r3

Description The issue concerns multiple vulnerabilities in the glibc package, which can lead to a disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally. The vulnerabilities may cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file.

Recommendations For glibc versions 2.3.4, consider updating to a version prior to 2.15-r3 to resolve the issue. For glibc versions prior to 2.15-r3, update to version 2.15-r3 or later to resolve the issue. As a temporary workaround, consider restricting access to the tzfile read function until a patch is available.