← Vulnerability feed

Vulnerability record · CVE-2011-1071 · published 8 April 2011

CVE-2011-1071: Gnu eglibc vulnerability

Gnu · Eglibc

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.

5.1 CVSS 2.0 Medium EPSS 14% · top 3.5% CWE-399 · CWE-399
5.1CVSS 2.0 base score
14%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
50References, 16 tagged exploit
16 Jun 2026Last modified by NVD

Description

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.debian.org/615120 Exploit
http://code.google.com/p/chromium/issues/detail?id=48733 Exploit
http://openwall.com/lists/oss-security/2011/02/26/3
http://openwall.com/lists/oss-security/2011/02/28/11 Exploit
http://openwall.com/lists/oss-security/2011/02/28/15
http://scarybeastsecurity.blogspot.com/2011/02/i-got-accidental-code-execution-via.html Exploit
http://seclists.org/fulldisclosure/2011/Feb/635 Exploit
http://seclists.org/fulldisclosure/2011/Feb/644 Patch
http://secunia.com/advisories/43492 Vendor Advisory
http://secunia.com/advisories/43830 Vendor Advisory
http://secunia.com/advisories/43989 Vendor Advisory
http://secunia.com/advisories/46397 Vendor Advisory
http://securityreason.com/securityalert/8175
http://securitytracker.com/id?1025290
http://sourceware.org/bugzilla/show_bug.cgi?id=11883 Exploit
http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=f15ce4d8dc139523fe0c273580b604b2453acba6
http://www.mandriva.com/security/advisories?name=MDVSA-2011:178
http://www.redhat.com/support/errata/RHSA-2011-0412.html Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0413.html Vendor Advisory
http://www.securityfocus.com/archive/1/520102/100/0/threaded
http://www.securityfocus.com/bid/46563 Exploit
http://www.vmware.com/security/advisories/VMSA-2011-0012.html
http://www.vupen.com/english/advisories/2011/0863 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=681054 ExploitPatch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12853
http://bugs.debian.org/615120 Exploit
http://code.google.com/p/chromium/issues/detail?id=48733 Exploit
http://openwall.com/lists/oss-security/2011/02/26/3
http://openwall.com/lists/oss-security/2011/02/28/11 Exploit
http://openwall.com/lists/oss-security/2011/02/28/15
http://scarybeastsecurity.blogspot.com/2011/02/i-got-accidental-code-execution-via.html Exploit
http://seclists.org/fulldisclosure/2011/Feb/635 Exploit
http://seclists.org/fulldisclosure/2011/Feb/644 Patch
http://secunia.com/advisories/43492 Vendor Advisory
http://secunia.com/advisories/43830 Vendor Advisory
http://secunia.com/advisories/43989 Vendor Advisory
http://secunia.com/advisories/46397 Vendor Advisory
http://securityreason.com/securityalert/8175
http://securitytracker.com/id?1025290
http://sourceware.org/bugzilla/show_bug.cgi?id=11883 Exploit

Track CVE-2011-1071 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2023-4911GNU C Library ld.so GLIBC_TUNABLES heap buffer overflowThe GNU C Library dynamic loader ld.so mishandles the GLIBC_TUNABLES environment variable, causing a heap-based buffer overflow and out-of-bounds wri…KEVEPSS 81%analysed10.0CVE-2015-0235glibc gethostbyname heap buffer overflow (GHOST)CVE-2015-0235 is a heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2 and other 2.x versions before 2.18. It is reach…EPSS 95%analysed9.8CVE-2026-5450Gnu glibc heap-based buffer overflow vulnerabilityCalling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width spec…EPSS 0.72%9.8CVE-2023-0687Gnu glibc classic buffer overflow vulnerabilityA vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file g…EPSS 1.1%9.8CVE-2023-25139Gnu glibc out-of-bounds write vulnerabilitysprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelate…EPSS 1.4%9.8CVE-2022-23218Gnu glibc classic buffer overflow vulnerabilityThe deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on t…EPSS 4.8%9.8CVE-2022-23219Gnu glibc classic buffer overflow vulnerabilityThe deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on …EPSS 4.3%9.8CVE-2021-33574Gnu glibc use after free vulnerabilityThe mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes ob…EPSS 2.9%

Source: NIST National Vulnerability Database (record CVE-2011-1071), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.