CVE-2011-1071 The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a lon...
MediumCVSS 5.1
EPSS 14.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU eglibc | All versions | No fix listed |
| GNU glibc | <= 2.12.1 | No fix listed |
| GNU glibc | = 1.00 | No fix listed |
| GNU glibc | = 1.01 | No fix listed |
| GNU glibc | = 1.02 | No fix listed |
| GNU glibc | = 1.03 | No fix listed |
| GNU glibc | = 1.04 | No fix listed |
| GNU glibc | = 1.05 | No fix listed |
| GNU glibc | = 1.06 | No fix listed |
| GNU glibc | = 1.07 | No fix listed |
| GNU glibc | = 1.08 | No fix listed |
| GNU glibc | = 1.09 | No fix listed |
| GNU glibc | = 1.09.1 | No fix listed |
| GNU glibc | = 2.0 | No fix listed |
| GNU glibc | = 2.0.1 | No fix listed |
| GNU glibc | = 2.0.2 | No fix listed |
| GNU glibc | = 2.0.3 | No fix listed |
| GNU glibc | = 2.0.4 | No fix listed |
| GNU glibc | = 2.0.5 | No fix listed |
| GNU glibc | = 2.0.6 | No fix listed |
| GNU glibc | = 2.1 | No fix listed |
| GNU glibc | = 2.1.1 | No fix listed |
| GNU glibc | = 2.1.1.6 | No fix listed |
| GNU glibc | = 2.1.2 | No fix listed |
| GNU glibc | = 2.1.3 | No fix listed |
Show 35 more
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU glibc | = 2.1.3.10 | No fix listed |
| GNU glibc | = 2.1.9 | No fix listed |
| GNU glibc | = 2.2 | No fix listed |
| GNU glibc | = 2.2.1 | No fix listed |
| GNU glibc | = 2.2.2 | No fix listed |
| GNU glibc | = 2.2.3 | No fix listed |
| GNU glibc | = 2.2.4 | No fix listed |
| GNU glibc | = 2.2.5 | No fix listed |
| GNU glibc | = 2.3 | No fix listed |
| GNU glibc | = 2.3.1 | No fix listed |
| GNU glibc | = 2.3.2 | No fix listed |
| GNU glibc | = 2.3.3 | No fix listed |
| GNU glibc | = 2.3.4 | No fix listed |
| GNU glibc | = 2.3.5 | No fix listed |
| GNU glibc | = 2.3.6 | No fix listed |
| GNU glibc | = 2.3.10 | No fix listed |
| GNU glibc | = 2.4 | No fix listed |
| GNU glibc | = 2.5 | No fix listed |
| GNU glibc | = 2.5.1 | No fix listed |
| GNU glibc | = 2.6 | No fix listed |
| GNU glibc | = 2.6.1 | No fix listed |
| GNU glibc | = 2.7 | No fix listed |
| GNU glibc | = 2.8 | No fix listed |
| GNU glibc | = 2.9 | No fix listed |
| GNU glibc | = 2.10 | No fix listed |
| GNU glibc | = 2.10.1 | No fix listed |
| GNU glibc | = 2.10.2 | No fix listed |
| GNU glibc | = 2.11 | No fix listed |
| GNU glibc | = 2.11.1 | No fix listed |
| GNU glibc | = 2.11.2 | No fix listed |
| GNU glibc | = 2.11.3 | No fix listed |
| GNU glibc | = 2.12.0 | No fix listed |
| debian/glibc(Debian:12) | < 2.11.2-12 | 2.11.2-12 |
| debian/glibc(Debian:13) | < 2.11.2-12 | 2.11.2-12 |
| debian/glibc(Debian:14) | < 2.11.2-12 | 2.11.2-12 |
References
- Debian Security Tracker CVE-2011-1071 vendor-advisory
- bugs.debian.org exploit
- code.google.com exploit
- [oss-security] 20110228 cve request: eglibc memory corruption mailing-list
- [oss-security] 20110228 Re: cve request: eglibc memory corruption exploit mailing-list
- [oss-security] 20110228 Re: cve request: eglibc memory corruption mailing-list
- scarybeastsecurity.blogspot.com exploit
- 20110224 glibc and alloca() exploit mailing-list
- 20110226 Re: glibc and alloca() mailing-list patch
- 43492 third-party-advisory vendor-advisory
- 43830 third-party-advisory vendor-advisory
- 43989 third-party-advisory vendor-advisory
- 46397 third-party-advisory vendor-advisory
- 8175 third-party-advisory
- 1025290 vdb-entry
- sourceware.org exploit
- sourceware.org
- MDVSA-2011:178 vendor-advisory
- RHSA-2011:0412 vendor-advisory
- RHSA-2011:0413 vendor-advisory
- 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console mailing-list
- 46563 exploit vdb-entry
- www.vmware.com
- ADV-2011-0863 vdb-entry vendor-advisory
- bugzilla.redhat.com exploit patch
- oval:org.mitre.oval:def:12853 signature vdb-entry