CVE-2009-4881

Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1…

published June 1, 2010

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted format string, as demonstrated by the %99999999999999999999n string, a related issue to CVE-2008-1391.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02025 · 80.8th percentile
Published
2010-06-01T20:00Z
EPSS history
Timeline
  • 01 JUN 20:00Z
    Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1…
    cvelistv5