CVE-2011-1659 in C Libraryinfo

Summary

Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

04/08/2011

Disclosure

04/08/2011

CPE

ready

CVSS

5.3

EPSS

0.02476

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!