CVE-2010-3856

CVE-2010-3856 affects glibc's dynamic linker (ld.so). Local users can escalate privileges by abusing LD_AUDIT to load an unsafe DSO from a trusted library directory. Concrete details: affected components are ld.so in glibc before 2.11.3 and 2.12.x before 2.12.2; the underlying issue is improper L...

CVE-2010-3847

Glbic ld.so (GNU C Library) contains a local privilege escalation in the dynamic linker due to improper handling of the LD_AUDIT environment variable with the $ORIGIN token. A crafted DSO in an arbitrary directory can be loaded when executing a setuid/setgid binary, enabling privilege escalation....

CVE-2013-1914

The CVE-2013-1914 issue affects the GNU C Library (glibc) up to version 2.17, where a stack-based buffer overflow in getaddrinfo could be triggered by a crafted hostname or IP, causing remote denial of service. Public details consistently reference an incomplete fix that ties into CVE-2013-4458 a...

CVE-2011-1071

CVE-2011-1071 affects the GNU C Library (glibc) and Embedded GLIBC (EGLIBC) prior to 2.12.2, with an underlying flaw in fnmatch() that lets context-dependent attackers supply a long UTF-8 string to trigger arbitrary code execution or memory exhaustion (DoS). Affected components include glibc in m...

CVE-2009-4880

Glibc (GNU C Library) is affected by CVE-2009-4880: multiple integer overflows in strfmon handling that can be triggered by a crafted format string, potentially causing memory growth or an application crash (denial of service). This is observed in glibc 2.10.1 and earlier. Mitigation per connecte...

CVE-2011-1089

CVE-2011-1089 refers to a vulnerability in the GNU C Library (glibc/libc6) up to version 2.13 where addmntent does not report an error when writes to /etc/mtab fail. The issue enables local users to trigger corruption of /etc/mtab, demonstrated by a process with a small RLIMIT_FSIZE. This is a se...

CVE-2010-0296

CVE-2010-0296 concerns the GNU C Library (glibc) up to version 2.11.1. The encode_name macro in misc/mntent_r.c fails to handle newline characters in mountpoint names, used by ncpmount and mount.cifs, leading to potential mtab corruption and, via crafted mount requests, local privilege elevation....

CVE-2013-4788

CVE-2013-4788 affects glibc (GNU C Library) up to version 2.4/2.17 and EGLIBC; PTR_MANGLE does not initialize the random value for the pointer guard, enabling context-dependent attackers to influence control flow via a buffer-overflow in an application. Affected components: PTR_MANGLE implementat...

CVE-2010-0830

CVE-2010-0830 describes an integer signedness error in the GNU C Library’s dynamic linker component ld.so, specifically in elf_get_dynamic_info. The vulnerability affects glibc versions 2.0.1 through 2.11.1, and is triggered when using the --verify option. A crafted ELF binary with a negative d_t...

CVE-2011-1095

Summary of CVE-2011-1095 (glibc locale quoting issue) : The vulnerability affects locale/programs/locale.c in the GNU C Library (glibc/libc6) prior to version 2.13. The code does not properly quote its output, which might allow local users to gain privileges via a crafted localization environment...

CVE-2011-1658

CVE-2011-1658 affects the GNU C Library (glibc) ld.so: when RPATH consists entirely of the special token $ORIGIN, it can enable local privilege escalation by linking a crafted LD_PRELOAD with a setuid/setgid program. Affected are glibc versions 2.13 and earlier. The root cause is expansion of the...

CVE-2009-4881

CVE-2009-4881 is a glibc (GNU C Library) vulnerability describing an integer overflow in the __vstrfmon_l function of strfmon_l.c, prior to glibc-2.10.1. The connected advisories (Gentoo GLSA-201011-01, openSUSE/SUSE updates) group it with several related glibc flaws (CVE-2008-1391, 2010-0296, 20...

CVE-2011-1659

CVE-2011-1659 is a vulnerability in the GNU C Library (glibc) prior to 2.13 where an integer overflow in posix/fnmatch.c can be triggered by long UTF-8 strings used in an fnmatch call, potentially causing an application crash (denial of service). Connected advisories (e.g., F5 BIG-IP SOL09408132)...