CVE-2011-2702 Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers to execute arbitrary....
MediumCVSS 6.8
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to (1) memcpy-ssse3-rep.S, (2) memcpy-ssse3.S, or (3) memset-sse2.S in sysdeps/i386/i686/multiarch/, which triggers an out-of-bounds read, as demonstrated using the memcpy function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU glibc | <= 2.12.2 | No fix listed |
| GNU glibc | = 2.12 | No fix listed |
| GNU glibc | = 2.12.1 | No fix listed |
| GNU eglibc | <= 2.12 | No fix listed |
References
- Debian Security Tracker CVE-2011-2702 vendor-advisory
- [oss-security] 20110718 CVE id request: (e)glibc mailing-list
- [oss-security] 20110720 Re: CVE id request: (e)glibc mailing-list
- www.eglibc.org
- www.nodefense.org
- 80718 vdb-entry
- xorl.wordpress.com exploit
- bugzilla.novell.com
- sourceware.org