Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-4881
HistoryJun 01, 2010 - 12:00 a.m.

CVE-2009-4881

2010-06-0100:00:00
ubuntu.com
ubuntu.com
13

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.02

Percentile

88.8%

Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the
strfmon implementation in the GNU C Library (aka glibc or libc6) before
2.10.1 allows context-dependent attackers to cause a denial of service
(application crash) via a crafted format string, as demonstrated by the
%99999999999999999999n string, a related issue to CVE-2008-1391.

Bugs

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.02

Percentile

88.8%