Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu glibc 2.1.1.6 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-4609
The svc_run function in the RPC implementation in glibc prior to 2.15 allows remote malicious users to cause a denial of service (CPU consumption) via a large number of RPC connections.
Gnu Glibc 2.0.3Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.0Gnu Glibc 2.1.9Gnu Glibc 2.1.3Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.1.1Gnu Glibc 2.13Gnu Glibc 2.0.6Gnu Glibc 2.0.4Gnu GlibcGnu Glibc 2.1Gnu Glibc 2.0.5
NA
CVE-2009-5029
Integer overflow in the __tzfile_read function in glibc prior to 2.15 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.
Gnu Glibc 2.1.2Gnu Glibc 2.0.5Gnu Glibc 2.0.6Gnu Glibc 2.1.1Gnu Glibc 2.0.3Gnu Glibc 2.0Gnu Glibc 2.13Gnu Glibc 2.1.1.6Gnu Glibc 2.1Gnu Glibc 2.1.9Gnu Glibc 2.0.1Gnu Glibc 2.0.4Gnu Glibc 2.0.2Gnu Glibc 2.1.3Gnu Glibc
NA
CVE-2009-5064
ldd in the GNU C Library (aka glibc or libc6) 2.13 and previous versions allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is j...
Gnu Glibc 2.1.2Gnu Glibc 2.0.5Gnu Glibc 2.0.6Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01Gnu Glibc 2.1Gnu GlibcGnu Glibc 1.09.1Gnu Glibc 2.0.1Gnu Glibc 1.09Gnu Glibc 2.0.4Gnu Glibc 2.0.2Gnu Glibc 1.03Gnu Glibc 1.08
NA
CVE-2004-1453
GNU glibc 2.3.4 prior to 2.3.4.20040619, 2.3.3 prior to 2.3.3.20040420, and 2.3.2 prior to 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.
Gnu Glibc 2.0.1Gnu Glibc 2.0.2Gnu Glibc 2.1.1.6Gnu Glibc 2.1.2Gnu Glibc 2.2.4Gnu Glibc 2.2.5Gnu Glibc 2.0.3Gnu Glibc 2.0.4Gnu Glibc 2.1.3Gnu Glibc 2.1.3.10Gnu Glibc 2.3Gnu Glibc 2.3.1Gnu Glibc 2.0.5Gnu Glibc 2.0.6Gnu Glibc 2.1.9Gnu Glibc 2.2Gnu Glibc 2.2.1Gnu Glibc 2.3.2Gnu Glibc 2.3.3Gnu Glibc 2.0Gnu Glibc 2.1Gnu Glibc 2.1.1
NA
CVE-2004-1382
The glibcbug script in glibc 2.3.4 and previous versions allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968.
Gnu Glibc 2.0Gnu Glibc 2.1.1Gnu Glibc 2.1.1.6Gnu Glibc 2.2.2Gnu Glibc 2.2.3Gnu Glibc 2.3.3Gnu Glibc 2.3.4Gnu Glibc 2.0.3Gnu Glibc 2.0.4Gnu Glibc 2.0.5Gnu Glibc 2.1.3.10Gnu Glibc 2.1.9Gnu Glibc 2.3Gnu Glibc 2.3.1Gnu Glibc 2.0.6Gnu Glibc 2.1Gnu Glibc 2.2Gnu Glibc 2.2.1Gnu Glibc 2.3.10Gnu Glibc 2.3.2Gnu Glibc 2.0.1Gnu Glibc 2.0.2
NA
CVE-2012-4412
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and previous versions allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overf...
Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.15Gnu Glibc 2.14.1Gnu Glibc 2.11.1Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 2.0.6Gnu Glibc 2.0.5Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.1.1Gnu Glibc 2.1Gnu Glibc 2.0Gnu Glibc 2.14Gnu Glibc 2.13
NA
CVE-2012-4424
Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and previous versions allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure...
Gnu Glibc 2.15Gnu Glibc 2.14.1Gnu Glibc 2.14Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 2.0.6Gnu Glibc 2.0.5Gnu Glibc 2.13Gnu Glibc 2.12.2Gnu Glibc 2.1.9Gnu Glibc 2.1.3Gnu Glibc 2.0.4Gnu Glibc 2.0.3Gnu Glibc 2.12.1Gnu Glibc 2.11.3Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.2
NA
CVE-2013-4788
The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and previous versions, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it easier for context-dependent malicious users to control execution flow ...
Gnu GlibcGnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.1.1.6Gnu Glibc 2.1.1Gnu Glibc 2.0.1Gnu Glibc 2.0Gnu Glibc 2.14.1Gnu Glibc 2.14Gnu Glibc 2.10.1Gnu Glibc 2.1.9Gnu Glibc 2.0.5Gnu Glibc 2.0.4Gnu Glibc 2.13Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.1.3Gnu Glibc 2.1.2Gnu Glibc 2.0.3Gnu Glibc 2.0.2Gnu Glibc 2.16Gnu Glibc 2.15
NA
CVE-2013-2207
pt_chown in GNU C Library (aka glibc or libc6) prior to 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
Gnu Glibc 2.14Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.2Gnu Glibc 2.11.1Gnu Glibc 2.1.1Gnu Glibc 2.1Gnu Glibc 2.0Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.11.3Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.13Gnu Glibc 2.1.9Gnu Glibc 2.1.3Gnu Glibc 2.0.4Gnu Glibc 2.0.3Gnu Glibc 2.15Gnu Glibc 2.14.1
NA
CVE-2010-4051
The regcomp implementation in the GNU C Library (aka glibc or libc6) up to and including 2.11.3, and 2.12.x up to and including 2.12.2, allows context-dependent malicious users to cause a denial of service (application crash) via a regular expression containing adjacent bounded r...
Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 1.07Gnu Glibc 2.12.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01Gnu Glibc 2.1Gnu Glibc 1.09.1Gnu Glibc 2.1.9Gnu Glibc 2.12.1Gnu Glibc 1.09Gnu Glibc 2.10Gnu Glibc 2.11.2Gnu Glibc 1.03Gnu Glibc 2.1.3.10Gnu Glibc 2.11.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook