CVE-2009-4881

CVE-2009-4881 is a glibc (GNU C Library) vulnerability describing an integer overflow in the __vstrfmon_l function of strfmon_l.c, prior to glibc-2.10.1. The connected advisories (Gentoo GLSA-201011-01, openSUSE/SUSE updates) group it with several related glibc flaws (CVE-2008-1391, 2010-0296, 20...

CVE-2003-0859

CVE-2003-0859 : Affected GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages to the kernel netlink interface via getifaddrs. Public advisories (Red Hat RHSA-2003:334/325, Fedora, OpenBSD/OpenPKG, SUSE, Slackware, etc.) describe the issue ...

CVE-2004-1382

CVE-2004-1382 affects glibc 2.3.4 and earlier via the glibcbug script, enabling a local symlink attack to overwrite arbitrary files in temporary locations. The root cause is the insecure handling of temporary files by the glibcbug script, with published advisories (e.g., CAN-2004-1382 and related...

CVE-2011-5320

CVE-2011-5320 affects the GNU C Library (glibc) where scanf and related input functions are vulnerable in versions prior to 2.15. A crafted large string of 0s can trigger a local denial of service (segmentation fault). The impact is limited to local attackers with access to the system and is not ...

CVE-2026-6238

The GNU C Library (glibc) versions 2.0.1 through 2.43 contain a vulnerability in the deprecated functions ns_printrrf , ns_printrr , and fp_nquery . The root cause is a failure to validate RDATA content against the RDATA length when processing A6, CERT, LOC, TKEY, or TSIG records in a DNS respons...

CVE-2026-4438

The GNU C Library (glibc) , specifically versions 2.34 to 2.43 , is vulnerable to an issue where calling the gethostbyaddr or gethostbyaddr_r functions with a configured nsswitch.conf specifying the library's DNS backend can result in an invalid DNS hostname being returned. This behavior violates...

CVE-2000-0824

The CVE-2000-0824 issue involves glibc 2.1.1 unsetenv(): when a variable appears twice in the environment, the value may not be properly removed, enabling a local attacker to influence setuid programs with duplicate variables (e.g., LD_PRELOAD, LD_LIBRARY_PATH) and potentially execute code as roo...

CVE-2026-0915

The GNU C Library (glibc) , versions 2.0 to 2.42, is vulnerable to an information disclosure flaw. Calling getnetbyaddr or getnetbyaddr_r with an nsswitch.conf file that uses the library's DNS backend for networks, while querying for a zero-valued network, can lead to stack contents leaking to th...

CVE-2006-7254

The CVE concerns the nscd daemon in the GNU C Library (glibc) prior to 2.5. The vulnerability arises because nscd does not close incoming client sockets that it cannot handle, enabling local users to perform a denial of service against the daemon. Affected component: nscd within glibc (before 2.5...

CVE-2010-3192

CVE-2010-3192 affects the GNU C Library (glibc) and concerns runtime memory protection that prints argv[0] and backtrace data, potentially allowing a context-dependent attacker to read sensitive process memory. The description references a setuid program with a stack-based overflow (fortify_fail/...

CVE-2000-0335

The CVE-2000-0335 issue affects the resolver in glibc 2.1.3 , which uses predictable IDs. This design allows a local attacker to cause DNS query spoofing by manipulating IDs, undermining DNS query integrity. The vulnerability’s impact is described as the ability to spoof results, with a base CVSS...

CVE-2000-0959

CVE-2000-0959 concerns glibc2/ld.so: the loader does not clear LD_DEBUG_OUTPUT and LD_DEBUG before invoking programs from a setuid context. This can enable a local attacker to exploit a symlink to overwrite arbitrary files. Concrete details exist in CERT/CC reports (Debian advisory) describing th...

CVE-2026-3904

The GNU C Library (glibc) versions 2.35 and 2.36 are vulnerable to a crash in the nscd client when running on x86_64 systems under high load. The root cause is an optimized memcmp implementation that fails when invoked with inputs concurrently modified by other threads or processes, leading to un...