Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-1071
HistoryApr 08, 2011 - 3:17 p.m.

CVE-2011-1071

2011-04-0815:17:27
CWE-399
[email protected]
web.nvd.nist.gov
7

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

9.2

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a “stack extension attack,” a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.

Affected configurations

Nvd
Node
gnueglibc
OR
gnuglibcRange≤2.12.1
OR
gnuglibcMatch1.00
OR
gnuglibcMatch1.01
OR
gnuglibcMatch1.02
OR
gnuglibcMatch1.03
OR
gnuglibcMatch1.04
OR
gnuglibcMatch1.05
OR
gnuglibcMatch1.06
OR
gnuglibcMatch1.07
OR
gnuglibcMatch1.08
OR
gnuglibcMatch1.09
OR
gnuglibcMatch1.09.1
OR
gnuglibcMatch2.0
OR
gnuglibcMatch2.0.1
OR
gnuglibcMatch2.0.2
OR
gnuglibcMatch2.0.3
OR
gnuglibcMatch2.0.4
OR
gnuglibcMatch2.0.5
OR
gnuglibcMatch2.0.6
OR
gnuglibcMatch2.1
OR
gnuglibcMatch2.1.1
OR
gnuglibcMatch2.1.1.6
OR
gnuglibcMatch2.1.2
OR
gnuglibcMatch2.1.3
OR
gnuglibcMatch2.1.3.10
OR
gnuglibcMatch2.1.9
OR
gnuglibcMatch2.2
OR
gnuglibcMatch2.2.1
OR
gnuglibcMatch2.2.2
OR
gnuglibcMatch2.2.3
OR
gnuglibcMatch2.2.4
OR
gnuglibcMatch2.2.5
OR
gnuglibcMatch2.3
OR
gnuglibcMatch2.3.1
OR
gnuglibcMatch2.3.2
OR
gnuglibcMatch2.3.3
OR
gnuglibcMatch2.3.4
OR
gnuglibcMatch2.3.5
OR
gnuglibcMatch2.3.6
OR
gnuglibcMatch2.3.10
OR
gnuglibcMatch2.4
OR
gnuglibcMatch2.5
OR
gnuglibcMatch2.5.1
OR
gnuglibcMatch2.6
OR
gnuglibcMatch2.6.1
OR
gnuglibcMatch2.7
OR
gnuglibcMatch2.8
OR
gnuglibcMatch2.9
OR
gnuglibcMatch2.10
OR
gnuglibcMatch2.10.1
OR
gnuglibcMatch2.10.2
OR
gnuglibcMatch2.11
OR
gnuglibcMatch2.11.1
OR
gnuglibcMatch2.11.2
OR
gnuglibcMatch2.11.3
OR
gnuglibcMatch2.12.0
VendorProductVersionCPE
gnueglibc*cpe:2.3:a:gnu:eglibc:*:*:*:*:*:*:*:*
gnuglibc*cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
gnuglibc1.00cpe:2.3:a:gnu:glibc:1.00:*:*:*:*:*:*:*
gnuglibc1.01cpe:2.3:a:gnu:glibc:1.01:*:*:*:*:*:*:*
gnuglibc1.02cpe:2.3:a:gnu:glibc:1.02:*:*:*:*:*:*:*
gnuglibc1.03cpe:2.3:a:gnu:glibc:1.03:*:*:*:*:*:*:*
gnuglibc1.04cpe:2.3:a:gnu:glibc:1.04:*:*:*:*:*:*:*
gnuglibc1.05cpe:2.3:a:gnu:glibc:1.05:*:*:*:*:*:*:*
gnuglibc1.06cpe:2.3:a:gnu:glibc:1.06:*:*:*:*:*:*:*
gnuglibc1.07cpe:2.3:a:gnu:glibc:1.07:*:*:*:*:*:*:*
Rows per page:
1-10 of 571

References

Related

ubuntucve 5
prion 5
nessus 53
f5 3
cvelist 5
debiancve 3
cve 5
veracode 3
nvd 4
exploitdb 1
slackware 1
openvas 69
ibm 1
debian 1
securityvulns 7
osv 1
oraclelinux 6
redhat 8
centos 5
fedora 7
vmware 2
gentoo 1
ubuntu 3
ubuntucve
ubuntucve
CVE-2011-1071
2011-04-08 00:00:00
CVE-2010-1917
2010-05-12 00:00:00
CVE-2007-4782
2007-09-10 00:00:00
prion
prion
Design/Logic Flaw
2011-04-08 15:17:00
Design/Logic Flaw
2010-05-12 11:46:00
Design/Logic Flaw
2010-07-28 20:00:00
nessus
nessus
F5 Networks BIG-IP : GNU C Library vulnerability (SOL15885)
2014-11-28 00:00:00
Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : php (SSA:2010-240-04)
2010-08-29 00:00:00
F5 Networks BIG-IP : glibc vulnerability (SOL09408132)
2016-08-19 00:00:00
f5
f5
K15885 : GNU C Library vulnerability CVE-2011-1071
2015-06-13 00:00:00
SOL15885 - GNU C Library vulnerability CVE-2011-1071
2014-11-27 00:00:00
K09408132 : glibc vulnerability CVE-2011-1659
2016-08-18 00:00:00
cvelist
cvelist
CVE-2011-1071
2011-04-08 15:00:00
CVE-2010-1917
2010-05-12 00:00:00
CVE-2007-4782
2007-09-10 21:00:00
debiancve
debiancve
CVE-2011-1071
2011-04-08 15:17:27
CVE-2010-2898
2010-07-28 20:00:00
CVE-2011-1659
2011-04-08 15:17:28
cve
cve
CVE-2011-1071
2011-04-08 15:17:27
CVE-2010-1917
2010-05-12 11:46:40
CVE-2010-2898
2010-07-28 20:00:10
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:53:57
Denial Of Service (DoS)
2020-04-10 00:22:29
Arbitrary Code Execution
2020-04-10 00:55:26
nvd
nvd
CVE-2010-1917
2010-05-12 11:46:40
CVE-2007-4782
2007-09-10 21:17:00
CVE-2010-2898
2010-07-28 20:00:10
exploitdb
exploitdb
GNU glibc < 2.12.2 - 'fnmatch()' Stack Corruption
2011-02-25 00:00:00
slackware
slackware
[slackware-security] php
2010-08-28 16:53:00
openvas
openvas
Slackware: Security Advisory (SSA:2010-240-04)
2012-09-10 00:00:00
Slackware Advisory SSA:2010-240-04 php
2012-09-11 00:00:00
Mandriva Update for glibc MDVSA-2011:178 (glibc)
2011-11-28 00:00:00
ibm
ibm
Security Bulletin: z/TPF is affected by GNU C library (glibc) vulnerabilities
2019-03-01 18:05:01
debian
debian
[SECURITY] [DSA-2089-1] New php5 packages fix several vulnerabilities
2010-08-06 05:42:32
securityvulns
securityvulns
[ MDVSA-2011:178 ] glibc
2011-12-04 00:00:00
PHP multiple security vulnerabilities
2010-05-11 00:00:00
glibc multiple security vulnerabilities
2011-12-04 00:00:00
osv
osv
php5 - several vulnerabilities
2010-08-06 00:00:00
oraclelinux
oraclelinux
glibc security update
2011-04-04 00:00:00
php security update
2008-07-16 00:00:00
php security and bug fix update
2008-07-16 00:00:00
redhat
redhat
(RHSA-2008:0582) Moderate: php security update
2008-07-22 00:00:00
(RHSA-2008:0544) Moderate: php security update
2008-07-16 00:00:00
(RHSA-2008:0545) Moderate: php security and bug fix update
2008-07-16 00:00:00
centos
centos
php security update
2008-07-16 16:10:52
php security update
2008-07-16 16:15:51
php security update
2010-11-30 12:21:14
fedora
fedora
[SECURITY] Fedora 13 Update: maniadrive-1.2-22.fc13
2010-08-23 22:00:56
[SECURITY] Fedora 13 Update: php-eaccelerator-0.9.6.1-2.fc13
2010-08-23 22:00:56
[SECURITY] Fedora 8 Update: php-5.2.6-2.fc8
2008-06-20 19:08:56
vmware
vmware
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2013-12-03 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2008-07-23 00:00:00
GNU C Library vulnerabilities
2012-03-09 00:00:00
PHP vulnerabilities
2010-09-20 00:00:00

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

9.2

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON
Related for NVD:CVE-2011-1071
ubuntucve5prion5nessus53f53cvelist5debiancve3cve5veracode3nvd4exploitdb1slackware1openvas69ibm1debian1securityvulns7osv1oraclelinux6redhat8centos5fedora7vmware2gentoo1ubuntu3