CVE-2011-1071
NoneCVSS
—
EPSS
14.3%
Published
Apr 8, 2011
CISA due date
—
The record
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | glibc | 0 | 2.11.2-12 |
| Debian:12 | glibc | 0 | 2.11.2-12 |
| Debian:13 | glibc | 0 | 2.11.2-12 |
| Red Hat:enterprise_linux:4::as | glibc | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::as | glibc-common | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::as | glibc-debuginfo | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::as | glibc-debuginfo-common | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::as | glibc-devel | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::as | glibc-headers | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::as | glibc-profile | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::as | glibc-utils | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::as | nptl-devel | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::as | nscd | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | glibc | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | glibc-common | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | glibc-debuginfo | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | glibc-debuginfo-common | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | glibc-devel | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | glibc-headers | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | glibc-profile | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | glibc-utils | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | nptl-devel | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::desktop | nscd | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | glibc | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | glibc-common | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | glibc-debuginfo | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | glibc-debuginfo-common | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | glibc-devel | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | glibc-headers | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | glibc-profile | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | glibc-utils | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | nptl-devel | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::es | nscd | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | glibc | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | glibc-common | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | glibc-debuginfo | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | glibc-debuginfo-common | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | glibc-devel | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | glibc-headers | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | glibc-profile | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | glibc-utils | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | nptl-devel | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:4::ws | nscd | 0 | 0:2.3.4-2.57 |
| Red Hat:enterprise_linux:5::server | glibc | 0 | 0:2.5-58.el5_6.2 |
| Red Hat:enterprise_linux:5::server | glibc-common | 0 | 0:2.5-58.el5_6.2 |
| Red Hat:enterprise_linux:5::server | glibc-debuginfo | 0 | 0:2.5-58.el5_6.2 |
| Red Hat:enterprise_linux:5::server | glibc-debuginfo-common | 0 | 0:2.5-58.el5_6.2 |
| Red Hat:enterprise_linux:5::server | glibc-devel | 0 | 0:2.5-58.el5_6.2 |
| Red Hat:enterprise_linux:5::server | glibc-headers | 0 | 0:2.5-58.el5_6.2 |
| Red Hat:enterprise_linux:5::server | glibc-utils | 0 | 0:2.5-58.el5_6.2 |
| Red Hat:enterprise_linux:5::server | nscd | 0 | 0:2.5-58.el5_6.2 |
| Red Hat:enterprise_linux:6::client | glibc | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::client | glibc-common | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::client | glibc-debuginfo | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::client | glibc-devel | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::client | glibc-headers | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::client | glibc-static | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::client | glibc-utils | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::client | nscd | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::computenode | glibc | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::computenode | glibc-common | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::computenode | glibc-debuginfo | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::computenode | glibc-devel | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::computenode | glibc-headers | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::computenode | glibc-static | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::computenode | glibc-utils | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::computenode | nscd | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::server | glibc | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::server | glibc-common | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::server | glibc-debuginfo | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::server | glibc-devel | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::server | glibc-headers | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::server | glibc-static | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::server | glibc-utils | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::server | nscd | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::workstation | glibc | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::workstation | glibc-common | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::workstation | glibc-debuginfo | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::workstation | glibc-devel | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::workstation | glibc-headers | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::workstation | glibc-static | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::workstation | glibc-utils | 0 | 0:2.12-1.7.el6_0.5 |
| Red Hat:enterprise_linux:6::workstation | nscd | 0 | 0:2.12-1.7.el6_0.5 |
Related vulnerabilities
- CVE-2021-3326 The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when… Also affects glibc
- CVE-2009-5155 In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c… Also affects glibc
- CVE-2017-12133 Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU… Also affects glibc
- CVE-2015-5180 res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of… Also affects glibc
- CVE-2017-1000366 glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to… Also affects glibc
- CVE-2014-9984 nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly… Also affects glibc
- CVE-2016-10228 The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when… Also affects glibc
- CVE-2016-4429 Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU… Also affects glibc