CVE-2011-1071

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC
(EGLIBC) allow context-dependent attackers to execute arbitrary code or
cause a denial of service (memory consumption) via a long UTF8 string that
is used in an fnmatch call, aka a “stack extension attack,” a related issue
to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported
for use of this library by Google Chrome.

Bugs

• <http://sourceware.org/bugzilla/show_bug.cgi?id=11883&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615120&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=681054&gt;