GNU glibc 1.00
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:glibc:1.00:*:*:*:*:*:*:*
part: a version: 1.00 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Glibc (b8610c0d-6ad8-566c-b276-03b23ae99324) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/glibc |
purl2cpe | 2026-06-01 10:11:53.488187 |
pkg:github/bminor/glibc |
purl2cpe | 2026-06-01 10:11:53.488189 |
pkg:github/lattera/glibc |
purl2cpe | 2026-06-01 10:11:53.488190 |
pkg:gnu/glibc |
purl2cpe | 2026-06-01 10:11:53.488191 |
pkg:rpm/fedora/glibc |
purl2cpe | 2026-06-01 10:11:53.488193 |
pkg:rpm/opensuse/glibc |
purl2cpe | 2026-06-01 10:11:53.488194 |
pkg:sourceware/glibc |
purl2cpe | 2026-06-01 10:11:53.488195 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-1659 |
vulnerable | 2026-06-08 04:58:01.211190 |
Details available
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
Published: 2011-04-08T15:00:00.000Z
Updated: 2024-08-06T22:37:24.569Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1658 |
vulnerable | 2026-06-08 04:58:01.208916 |
Details available
ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program.
Published: 2011-04-08T15:00:00.000Z
Updated: 2024-08-06T22:37:24.622Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1095 |
vulnerable | 2026-06-08 04:57:55.677299 |
Details available
locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, which might allow local users to gain privileges via a crafted localization environment variable, in conjunction with a program that executes a script that uses the eval function.
Published: 2011-04-10T01:29:00.000Z
Updated: 2024-08-06T22:14:27.579Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1089 |
vulnerable | 2026-06-08 04:57:55.094453 |
Details available
The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.
Published: 2011-04-10T01:29:00.000Z
Updated: 2024-08-06T22:14:27.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1071 |
vulnerable | 2026-06-08 04:57:54.950429 |
Details available
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.
Published: 2011-04-08T15:00:00.000Z
Updated: 2024-08-06T22:14:27.827Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4052 |
vulnerable | 2026-06-08 04:55:18.719392 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4051 |
vulnerable | 2026-06-08 04:55:18.652259 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3856 |
vulnerable | 2026-06-08 04:55:17.612421 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3847 |
vulnerable | 2026-06-08 04:55:17.525139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5064 |
vulnerable | 2026-06-08 04:51:51.874820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4881 |
vulnerable | 2026-06-08 04:51:50.331706 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.