Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nptl-develUpgrade glibc-profileUpgrade glibcUpgrade nscdUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-devel | Dec 1, 2016 | Apr 8, 2011 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Apr 8, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 18, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Apr 8, 2011 |
| Oracle_linux | — | Upgrade glibc-headersUpgrade glibc-commonUpgrade nscdUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc | Oct 16, 2024 | Apr 8, 2011 |
| Suse | — | Upgrade glibc-locale-64bitUpgrade glibc-dceext-x86Upgrade glibcUpgrade glibc-profile-64bitUpgrade glibc-htmlUpgrade glibc-locale-x86Upgrade glibc-develUpgrade glibc-devel-32bitUpgrade glibc-i18ndataUpgrade sap-aio-releaseUpgrade glibc-localeUpgrade glibc-dceext-32bitUpgrade glibc-profile-x86Upgrade glibc-devel-64bitUpgrade glibc-32bitUpgrade glibc-dceextUpgrade glibc-infoUpgrade glibc-dceext-64bitUpgrade glibc-x86Upgrade glibc-profile-32bitUpgrade glibc-profileUpgrade timezoneUpgrade glibc-64bitUpgrade glibc-locale-32bitUpgrade nscd | Dec 12, 2013 | Apr 8, 2011 |
| Ubuntu | — | Upgrade libc6Upgrade libc-bin | Nov 8, 2024 | Apr 8, 2011 |
| Vmsa 2011 0010 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 433742 | Dec 17, 2012 | Apr 8, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESXi 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESXi 5.0 to build number 515841Upgrade VMware ESXi 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Apr 8, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub