Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-1071
HistoryApr 08, 2011 - 3:17 p.m.

CVE-2011-1071

2011-04-0815:17:27
CWE-399
[email protected]
web.nvd.nist.gov
70
gnu c library
glibc
libc6
eglibc
cve-2011-1071
stack extension attack
memory consumption
utf8 string
google chrome

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.7%

JSON

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a “stack extension attack,” a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.

Affected configurations

NVD
Node
gnueglibc
OR
gnuglibcRange≤2.12.1
OR
gnuglibcMatch1.00
OR
gnuglibcMatch1.01
OR
gnuglibcMatch1.02
OR
gnuglibcMatch1.03
OR
gnuglibcMatch1.04
OR
gnuglibcMatch1.05
OR
gnuglibcMatch1.06
OR
gnuglibcMatch1.07
OR
gnuglibcMatch1.08
OR
gnuglibcMatch1.09
OR
gnuglibcMatch1.09.1
OR
gnuglibcMatch2.0
OR
gnuglibcMatch2.0.1
OR
gnuglibcMatch2.0.2
OR
gnuglibcMatch2.0.3
OR
gnuglibcMatch2.0.4
OR
gnuglibcMatch2.0.5
OR
gnuglibcMatch2.0.6
OR
gnuglibcMatch2.1
OR
gnuglibcMatch2.1.1
OR
gnuglibcMatch2.1.1.6
OR
gnuglibcMatch2.1.2
OR
gnuglibcMatch2.1.3
OR
gnuglibcMatch2.1.3.10
OR
gnuglibcMatch2.1.9
OR
gnuglibcMatch2.2
OR
gnuglibcMatch2.2.1
OR
gnuglibcMatch2.2.2
OR
gnuglibcMatch2.2.3
OR
gnuglibcMatch2.2.4
OR
gnuglibcMatch2.2.5
OR
gnuglibcMatch2.3
OR
gnuglibcMatch2.3.1
OR
gnuglibcMatch2.3.2
OR
gnuglibcMatch2.3.3
OR
gnuglibcMatch2.3.4
OR
gnuglibcMatch2.3.5
OR
gnuglibcMatch2.3.6
OR
gnuglibcMatch2.3.10
OR
gnuglibcMatch2.4
OR
gnuglibcMatch2.5
OR
gnuglibcMatch2.5.1
OR
gnuglibcMatch2.6
OR
gnuglibcMatch2.6.1
OR
gnuglibcMatch2.7
OR
gnuglibcMatch2.8
OR
gnuglibcMatch2.9
OR
gnuglibcMatch2.10
OR
gnuglibcMatch2.10.1
OR
gnuglibcMatch2.10.2
OR
gnuglibcMatch2.11
OR
gnuglibcMatch2.11.1
OR
gnuglibcMatch2.11.2
OR
gnuglibcMatch2.11.3
OR
gnuglibcMatch2.12.0

References

Related

cvelist 5
f5 3
debiancve 3
nessus 52
prion 5
nvd 5
ubuntucve 5
veracode 3
cve 4
ibm 1
openvas 70
securityvulns 7
oraclelinux 6
redhat 8
slackware 1
vmware 2
centos 5
gentoo 1
debian 1
ubuntu 3
osv 1
fedora 7
suse 1
cvelist
cvelist
CVE-2011-1071
2011-04-08 15:00:00
CVE-2011-1659
2011-04-08 15:00:00
CVE-2007-4782
2007-09-10 21:00:00
f5
f5
K15885 : GNU C Library vulnerability CVE-2011-1071
2015-06-13 00:00:00
SOL15885 - GNU C Library vulnerability CVE-2011-1071
2014-11-27 00:00:00
K09408132 : glibc vulnerability CVE-2011-1659
2016-08-18 00:00:00
debiancve
debiancve
CVE-2011-1071
2011-04-08 15:17:27
CVE-2011-1659
2011-04-08 15:17:28
CVE-2010-2898
2010-07-28 20:00:00
nessus
nessus
F5 Networks BIG-IP : GNU C Library vulnerability (SOL15885)
2014-11-28 00:00:00
F5 Networks BIG-IP : glibc vulnerability (SOL09408132)
2016-08-19 00:00:00
SuSE 10 Security Update : glibc (ZYPP Patch Number 7574)
2011-12-13 00:00:00
prion
prion
Design/Logic Flaw
2011-04-08 15:17:00
Integer overflow
2011-04-08 15:17:00
Design/Logic Flaw
2010-05-12 11:46:00
nvd
nvd
CVE-2011-1071
2011-04-08 15:17:27
CVE-2011-1659
2011-04-08 15:17:28
CVE-2010-2898
2010-07-28 20:00:10
ubuntucve
ubuntucve
CVE-2011-1071
2011-04-08 00:00:00
CVE-2011-1659
2011-04-08 00:00:00
CVE-2010-1917
2010-05-12 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:55:26
Denial Of Service (DoS)
2020-04-10 00:22:29
Denial Of Service (DoS)
2020-04-10 00:53:57
cve
cve
CVE-2011-1659
2011-04-08 15:17:28
CVE-2010-2898
2010-07-28 20:00:10
CVE-2010-1917
2010-05-12 11:46:40
ibm
ibm
Security Bulletin: z/TPF is affected by GNU C library (glibc) vulnerabilities
2019-03-01 18:05:01
openvas
openvas
RedHat Update for glibc RHSA-2011:0413-01
2012-06-06 00:00:00
RedHat Update for glibc RHSA-2011:0413-01
2012-06-06 00:00:00
Mandriva Update for glibc MDVSA-2011:178 (glibc)
2011-11-28 00:00:00
securityvulns
securityvulns
[ MDVSA-2011:178 ] glibc
2011-12-04 00:00:00
glibc multiple security vulnerabilities
2011-12-04 00:00:00
[USN-1396-1] GNU C Library vulnerabilities
2012-03-10 00:00:00
oraclelinux
oraclelinux
glibc security update
2011-04-04 00:00:00
glibc security update
2011-04-04 00:00:00
glibc security and bug fix update
2012-02-13 00:00:00
redhat
redhat
(RHSA-2011:0413) Important: glibc security update
2011-04-04 00:00:00
(RHSA-2011:0412) Important: glibc security update
2011-04-04 00:00:00
(RHSA-2012:0125) Moderate: glibc security and bug fix update
2012-02-13 00:00:00
slackware
slackware
[slackware-security] php
2010-08-28 16:53:00
vmware
vmware
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
centos
centos
glibc, nscd security update
2011-04-14 13:51:19
glibc, nptl, nscd security update
2012-02-14 02:09:08
php security update
2008-07-16 16:10:52
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2013-12-03 00:00:00
debian
debian
[SECURITY] [DSA-2089-1] New php5 packages fix several vulnerabilities
2010-08-06 05:42:32
ubuntu
ubuntu
GNU C Library vulnerabilities
2012-03-09 00:00:00
PHP vulnerabilities
2010-09-20 00:00:00
PHP vulnerabilities
2008-07-23 00:00:00
osv
osv
php5 - several vulnerabilities
2010-08-06 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: maniadrive-1.2-22.fc12
2010-08-23 22:08:06
[SECURITY] Fedora 12 Update: php-eaccelerator-0.9.6.1-2.fc12
2010-08-23 22:08:06
[SECURITY] Fedora 13 Update: php-5.3.3-1.fc13
2010-08-23 22:00:56
suse
suse
remote code execution in php4, php5
2008-01-29 14:18:48

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.7%

JSON
Related for CVE-2011-1071
cvelist5f53debiancve3nessus52prion5nvd5ubuntucve5veracode3cve4ibm1openvas70securityvulns7oraclelinux6redhat8slackware1vmware2centos5gentoo1debian1ubuntu3osv1fedora7suse1