Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu glibc 1.09 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-5064
ldd in the GNU C Library (aka glibc or libc6) 2.13 and previous versions allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is j...
Gnu Glibc 2.1.2Gnu Glibc 2.0.5Gnu Glibc 2.0.6Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01Gnu Glibc 2.1Gnu GlibcGnu Glibc 1.09.1Gnu Glibc 2.0.1Gnu Glibc 1.09Gnu Glibc 2.0.4Gnu Glibc 2.0.2Gnu Glibc 1.03Gnu Glibc 1.08
NA
CVE-2010-4051
The regcomp implementation in the GNU C Library (aka glibc or libc6) up to and including 2.11.3, and 2.12.x up to and including 2.12.2, allows context-dependent malicious users to cause a denial of service (application crash) via a regular expression containing adjacent bounded r...
Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 1.07Gnu Glibc 2.12.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01Gnu Glibc 2.1Gnu Glibc 1.09.1Gnu Glibc 2.1.9Gnu Glibc 2.12.1Gnu Glibc 1.09Gnu Glibc 2.10Gnu Glibc 2.11.2Gnu Glibc 1.03Gnu Glibc 2.1.3.10Gnu Glibc 2.11.3
NA
CVE-2010-4052
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) up to and including 2.11.3, and 2.12.x up to and including 2.12.2, allows context-dependent malicious users to cause a denial of service (resource exhaustion) via a regular exp...
Gnu Glibc 1.00Gnu Glibc 1.01Gnu Glibc 1.07Gnu Glibc 1.06Gnu Glibc 2.1.3.10Gnu Glibc 2.1.9Gnu Glibc 2.11.3Gnu Glibc 2.12.2Gnu Glibc 1.09.1Gnu Glibc 1.09Gnu Glibc 1.08Gnu Glibc 2.1.2Gnu Glibc 2.1.3Gnu Glibc 2.10Gnu Glibc 2.10.1Gnu Glibc 1.05Gnu Glibc 1.04Gnu Glibc 2.1Gnu Glibc 2.10.2Gnu Glibc 2.12.0Gnu Glibc 2.12.1Gnu Glibc 2.11
NA
CVE-2009-4881
Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) prior to 2.10.1 allows context-dependent malicious users to cause a denial of service (application crash) via a crafted format string, as de...
Gnu Glibc 2.2.2Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01Gnu Glibc 2.3.10Gnu Glibc 2.4Gnu Glibc 2.1Gnu Glibc 2.3.4
NA
CVE-2010-3847
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) up to and including 2.11.2, and 2.12.x up to and including 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
NA
CVE-2010-3856
ld.so in the GNU C Library (aka glibc or libc6) prior to 2.11.3, and 2.12.x prior to 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging ...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
NA
CVE-2011-1659
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and previous versions allows context-dependent malicious users to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argumen...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu GlibcGnu Glibc 2.1.1.6Gnu Glibc 1.04
NA
CVE-2011-1089
The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and previous versions does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from...
Gnu Glibc 1.03Gnu Glibc 1.02Gnu Glibc 1.09Gnu Glibc 1.08Gnu Glibc 2.0.5Gnu Glibc 2.0.4Gnu Glibc 2.0.3Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.1.2Gnu Glibc 2.1.3Gnu Glibc 2.1.3.10Gnu Glibc 2.1.9Gnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.12.2Gnu GlibcGnu Glibc 2.3.5Gnu Glibc 2.8Gnu Glibc 2.9Gnu Glibc 2.10Gnu Glibc 2.2.4
NA
CVE-2011-1658
ld.so in the GNU C Library (aka glibc or libc6) 2.13 and previous versions expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or...
Gnu Glibc 1.00Gnu Glibc 1.08Gnu Glibc 1.07Gnu Glibc 2.10.1Gnu Glibc 2.1Gnu Glibc 2.0.1Gnu Glibc 2.0Gnu Glibc 2.3.1Gnu Glibc 2.3.10Gnu Glibc 2.2Gnu Glibc 2.2.1Gnu Glibc 2.5Gnu Glibc 2.5.1Gnu GlibcGnu Glibc 1.04Gnu Glibc 1.03Gnu Glibc 2.3.5Gnu Glibc 2.8Gnu Glibc 2.0.5Gnu Glibc 2.0.4Gnu Glibc 2.2.3Gnu Glibc 2.2.4
NA
CVE-2011-1095
locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) prior to 2.13 does not quote its output, which might allow local users to gain privileges via a crafted localization environment variable, in conjunction with a program that executes a script that uses t...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook