CVE-2011-1071

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial…

published April 8, 2011

CVSS

—

EPSS

14%

Percentile

96.6

In the wild

Unconfirmed

What it is

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.14323 · 96.6th percentile
Published: 2011-04-08T15:00Z

EPSS history

Timeline

08 APR 15:00Z
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial…
cvelistv5