CVE-2011-2702

🗓️ 27 Oct 2014 20:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 88 Views🌐 WEB

CVE-2011-2702 Integer signedness error in Glibc before 2.1

Reporter	Title	Published	Views	Family All 23
zdt	eGlibc Signedness Code Execution Vulnerability	1 Aug 201200:00	–	zdt
Circl	CVE-2011-2702	1 Aug 201200:00	–	circl
Cvelist	CVE-2011-2702	27 Oct 201420:00	–	cvelist
Debian CVE	CVE-2011-2702	27 Oct 201420:00	–	debiancve
Exploit DB	eGlibc - Signedness Code Execution	1 Aug 201200:00	–	exploitdb
EUVD	EUVD-2011-2683	7 Oct 202500:30	–	euvd
exploitpack	eGlibc - Signedness Code Execution	1 Aug 201200:00	–	exploitpack
F5 Networks	K15967: glibc and eglibc vulnerability CVE-2011-2702	21 Feb 202318:10	–	f5
F5 Networks	SOL15967 - glibc and eglibc vulnerability CVE-2011-2702	8 Jan 201500:00	–	f5
NVD	CVE-2011-2702	27 Oct 201420:55	–	nvd

NVD

Node

gnu glibcRange≤2.12.2

gnu glibcMatch2.12

gnu glibcMatch2.12.1

Node

gnu eglibcRange≤2.12

Source	Link
bugzilla	www.bugzilla.novell.com/show_bug.cgi
sourceware	www.sourceware.org/git/
seclists	www.seclists.org/oss-sec/2011/q3/153
eglibc	www.eglibc.org/cgi-bin/viewvc.cgi/trunk/libc/ChangeLog
xorl	www.xorl.wordpress.com/2011/08/06/cve-2011-2702-eglibc-and-glibc-signedness-issue/
nodefense	www.nodefense.org/eglibc.txt
osvdb	www.osvdb.org/80718
seclists	www.seclists.org/oss-sec/2011/q3/123

Parameter	Position	Path	Description	CWE
length	path	sysdeps/i386/i686/multiarch/memcpy-ssse3-rep.S	Signedness bug in memcpy-ssse3-repeat path allowing control of jump table via negative length	CWE-94
length	path	sysdeps/i386/i686/multiarch/memcpy-ssse3.S	Signedness bug in memcpy-ssse3 path enabling attacker-controlled jump table index with negative length	CWE-94
length	path	sysdeps/i386/i686/multiarch/memset-sse2.S	Signedness bug in memset-sse2 path enabling exploit via negative length to influence execution flow	CWE-94

16 Jun 2026 23:31Current

7.3High risk

Vulners AI Score7.3

CVSS 26.8

EPSS0.08458