GCVE - cpe:2.3:a:gnu:glibc:1.09:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:glibc:1.09:*:*:*:*:*:*:*

part: a version: 1.09 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Glibc (`b8610c0d-6ad8-566c-b276-03b23ae99324`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/glibc`	purl2cpe	2026-06-01 10:11:53.488562
`pkg:github/bminor/glibc`	purl2cpe	2026-06-01 10:11:53.488564
`pkg:github/lattera/glibc`	purl2cpe	2026-06-01 10:11:53.488565
`pkg:gnu/glibc`	purl2cpe	2026-06-01 10:11:53.488566
`pkg:rpm/fedora/glibc`	purl2cpe	2026-06-01 10:11:53.488568
`pkg:rpm/opensuse/glibc`	purl2cpe	2026-06-01 10:11:53.488569
`pkg:sourceware/glibc`	purl2cpe	2026-06-01 10:11:53.488571

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1659`	vulnerable	2026-06-08 04:58:01.211390	Details available Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071. Published: 2011-04-08T15:00:00.000Z Updated: 2024-08-06T22:37:24.569Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=681054 http://www.securityfocus.com/archive/1/520102/100/0/threaded http://secunia.com/advisories/46397 http://secunia.com/advisories/44353 http://www.securitytracker.com/id?1025450	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1658`	vulnerable	2026-06-08 04:58:01.209118	Details available ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program. Published: 2011-04-08T15:00:00.000Z Updated: 2024-08-06T22:37:24.622Z Open on db.gcve.eu Reference links http://sourceware.org/bugzilla/show_bug.cgi?id=12393 http://www.securityfocus.com/archive/1/520102/100/0/threaded http://secunia.com/advisories/46397 https://exchange.xforce.ibmcloud.com/vulnerabilities/66820 http://www.vmware.com/security/advisories/VMSA-2011-0012.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1095`	vulnerable	2026-06-08 04:57:55.677749	Details available locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, which might allow local users to gain privileges via a crafted localization environment variable, in conjunction with a program that executes a script that uses the eval function. Published: 2011-04-10T01:29:00.000Z Updated: 2024-08-06T22:14:27.579Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-201011-01.xml http://www.securityfocus.com/archive/1/520102/100/0/threaded http://secunia.com/advisories/46397 http://sourceware.org/git/?p=glibc.git%3Ba=patch%3Bh=026373745eab50a683536d950cb7e17dc98c4259 http://www.redhat.com/support/errata/RHSA-2011-0412.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1089`	vulnerable	2026-06-08 04:57:55.095014	Details available The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296. Published: 2011-04-10T01:29:00.000Z Updated: 2024-08-06T22:14:27.618Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2011/03/14/5 http://openwall.com/lists/oss-security/2011/03/04/9 http://sourceware.org/bugzilla/show_bug.cgi?id=12625 http://openwall.com/lists/oss-security/2011/03/22/6 http://www.securityfocus.com/bid/46740	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1071`	vulnerable	2026-06-08 04:57:54.956090	Details available The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome. Published: 2011-04-08T15:00:00.000Z Updated: 2024-08-06T22:14:27.827Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/46563 http://securityreason.com/securityalert/8175 https://bugzilla.redhat.com/show_bug.cgi?id=681054 http://www.securityfocus.com/archive/1/520102/100/0/threaded http://secunia.com/advisories/46397	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4052`	vulnerable	2026-06-08 04:55:18.719551	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4051`	vulnerable	2026-06-08 04:55:18.652439	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3856`	vulnerable	2026-06-08 04:55:17.612595	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3847`	vulnerable	2026-06-08 04:55:17.529981	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-5064`	vulnerable	2026-06-08 04:51:51.874987	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4881`	vulnerable	2026-06-08 04:51:50.336241	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.