Published: 08/04/2011 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and previous versions allows context-dependent malicious users to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc 2.2.2
gnu glibc 2.9
gnu glibc 2.7
gnu glibc 2.1.2
gnu glibc 2.11
gnu glibc 2.0.5
gnu glibc 2.2.5
gnu glibc 2.0.6
gnu glibc 2.10.1
gnu glibc 1.00
gnu glibc 1.06
gnu glibc 2.1.1
gnu glibc 1.02
gnu glibc 2.0.3
gnu glibc 1.07
gnu glibc 2.3.1
gnu glibc 2.3
gnu glibc 2.12.0
gnu glibc 2.0
gnu glibc
gnu glibc 2.1.1.6
gnu glibc 1.04
gnu glibc 1.01
gnu glibc 2.3.10
gnu glibc 2.4
gnu glibc 2.1
gnu glibc 2.3.4
gnu glibc 1.09.1
gnu glibc 2.1.9
gnu glibc 2.3.3
gnu glibc 2.12.1
gnu glibc 2.6.1
gnu glibc 2.0.1
gnu glibc 1.09
gnu glibc 2.10
gnu glibc 2.11.2
gnu glibc 2.5.1
gnu glibc 2.6
gnu glibc 2.0.4
gnu glibc 2.0.2
gnu glibc 2.2.1
gnu glibc 2.3.2
gnu glibc 1.03
gnu glibc 2.1.3.10
gnu glibc 2.3.6
gnu glibc 2.2.3
gnu glibc 2.5
gnu glibc 2.11.3
gnu glibc 1.08
gnu glibc 2.3.5
gnu glibc 2.8
gnu glibc 2.11.1
gnu glibc 2.2.4
gnu glibc 2.1.3
gnu glibc 1.05
gnu glibc 2.2
gnu glibc 2.12.2
gnu glibc 2.10.2

Synopsis Moderate: glibc security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated glibc packages that fix multiple security issues and one bug arenow available for Red Hat Enterprise Linux 4The Red Hat Security Response Team has rated this update as having moderatesecurity impact ...

Debian Bug report logs - #615120 eglibc: alloca memory corruption Package: eglibc; Maintainer for eglibc is (unknown); Reported by: Michael Gilbert <michaelsgilbert@gmailcom> Date: Fri, 25 Feb 2011 21:21:01 UTC Severity: grave Found in version 2112-10 Fixed in versions eglibc/2112-12, eglibc/2113-1 Done: Aureli ...

Multiple vulnerabilities were discovered and fixed in the GNU C Library ...

CWE-189 http://code.google.com/p/chromium/issues/detail?id=48733 http://sourceware.org/bugzilla/show_bug.cgi?id=12583 http://scarybeastsecurity.blogspot.com/2011/02/i-got-accidental-code-execution-via.html https://bugzilla.redhat.com/show_bug.cgi?id=681054 http://secunia.com/advisories/44353 http://www.securitytracker.com/id?1025450 http://secunia.com/advisories/46397 http://www.vmware.com/security/advisories/VMSA-2011-0012.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:178 http://www.mandriva.com/security/advisories?name=MDVSA-2011:179 https://exchange.xforce.ibmcloud.com/vulnerabilities/66819 http://www.securityfocus.com/archive/1/520102/100/0/threaded http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=8126d90480fa3e0c5c5cd0d02cb1c93174b45485 https://access.redhat.com/errata/RHSA-2012:0125 https://nvd.nist.gov https://usn.ubuntu.com/1396-1/

CVE-2011-1659

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect