Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu glibc 2.10.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-4412
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and previous versions allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overf...
Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.15Gnu Glibc 2.14.1Gnu Glibc 2.11.1Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 2.0.6Gnu Glibc 2.0.5Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.1.1Gnu Glibc 2.1Gnu Glibc 2.0Gnu Glibc 2.14Gnu Glibc 2.13
NA
CVE-2012-4424
Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and previous versions allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure...
Gnu Glibc 2.15Gnu Glibc 2.14.1Gnu Glibc 2.14Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 2.0.6Gnu Glibc 2.0.5Gnu Glibc 2.13Gnu Glibc 2.12.2Gnu Glibc 2.1.9Gnu Glibc 2.1.3Gnu Glibc 2.0.4Gnu Glibc 2.0.3Gnu Glibc 2.12.1Gnu Glibc 2.11.3Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.2
NA
CVE-2013-4788
The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and previous versions, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it easier for context-dependent malicious users to control execution flow ...
Gnu GlibcGnu Glibc 2.11.3Gnu Glibc 2.11.2Gnu Glibc 2.1.1.6Gnu Glibc 2.1.1Gnu Glibc 2.0.1Gnu Glibc 2.0Gnu Glibc 2.14.1Gnu Glibc 2.14Gnu Glibc 2.10.1Gnu Glibc 2.1.9Gnu Glibc 2.0.5Gnu Glibc 2.0.4Gnu Glibc 2.13Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.1.3Gnu Glibc 2.1.2Gnu Glibc 2.0.3Gnu Glibc 2.0.2Gnu Glibc 2.16Gnu Glibc 2.15
NA
CVE-2013-2207
pt_chown in GNU C Library (aka glibc or libc6) prior to 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
Gnu Glibc 2.14Gnu GlibcGnu Glibc 2.16Gnu Glibc 2.11.2Gnu Glibc 2.11.1Gnu Glibc 2.1.1Gnu Glibc 2.1Gnu Glibc 2.0Gnu Glibc 2.12.2Gnu Glibc 2.12.1Gnu Glibc 2.11.3Gnu Glibc 2.1.2Gnu Glibc 2.1.1.6Gnu Glibc 2.0.2Gnu Glibc 2.0.1Gnu Glibc 2.13Gnu Glibc 2.1.9Gnu Glibc 2.1.3Gnu Glibc 2.0.4Gnu Glibc 2.0.3Gnu Glibc 2.15Gnu Glibc 2.14.1
NA
CVE-2010-4051
The regcomp implementation in the GNU C Library (aka glibc or libc6) up to and including 2.11.3, and 2.12.x up to and including 2.12.2, allows context-dependent malicious users to cause a denial of service (application crash) via a regular expression containing adjacent bounded r...
Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 1.07Gnu Glibc 2.12.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01Gnu Glibc 2.1Gnu Glibc 1.09.1Gnu Glibc 2.1.9Gnu Glibc 2.12.1Gnu Glibc 1.09Gnu Glibc 2.10Gnu Glibc 2.11.2Gnu Glibc 1.03Gnu Glibc 2.1.3.10Gnu Glibc 2.11.3
NA
CVE-2010-4052
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) up to and including 2.11.3, and 2.12.x up to and including 2.12.2, allows context-dependent malicious users to cause a denial of service (resource exhaustion) via a regular exp...
Gnu Glibc 1.00Gnu Glibc 1.01Gnu Glibc 1.07Gnu Glibc 1.06Gnu Glibc 2.1.3.10Gnu Glibc 2.1.9Gnu Glibc 2.11.3Gnu Glibc 2.12.2Gnu Glibc 1.09.1Gnu Glibc 1.09Gnu Glibc 1.08Gnu Glibc 2.1.2Gnu Glibc 2.1.3Gnu Glibc 2.10Gnu Glibc 2.10.1Gnu Glibc 1.05Gnu Glibc 1.04Gnu Glibc 2.1Gnu Glibc 2.10.2Gnu Glibc 2.12.0Gnu Glibc 2.12.1Gnu Glibc 2.11
NA
CVE-2010-0296
The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and previous versions, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corrup...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 2.1.1Gnu Glibc 2.0.3Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 2.3.10Gnu Glibc 2.4Gnu Glibc 2.1Gnu Glibc 2.3.4Gnu Glibc 2.1.9Gnu Glibc 2.3.3Gnu Glibc 2.6.1
NA
CVE-2010-0830
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 up to and including 2.11.1, when the --verify option is used, allows user-assisted remote malicious users to execute arbitrary code via a c...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 2.1.1Gnu Glibc 2.0.3Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.1.1.6Gnu Glibc 2.3.10Gnu Glibc 2.4Gnu Glibc 2.1Gnu Glibc 2.3.4Gnu Glibc 2.1.9Gnu Glibc 2.3.3Gnu Glibc 2.6.1Gnu Glibc 2.0.1
NA
CVE-2010-3847
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) up to and including 2.11.2, and 2.12.x up to and including 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
NA
CVE-2010-3856
ld.so in the GNU C Library (aka glibc or libc6) prior to 2.11.3, and 2.12.x prior to 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging ...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook