Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-4881
HistoryJun 01, 2010 - 8:30 p.m.

CVE-2009-4881

2010-06-0120:30:02
CWE-189
[email protected]
web.nvd.nist.gov
42
cve-2009-4881
glibc
libc6
integer overflow
denial of service
format string vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.8%

JSON

Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted format string, as demonstrated by the %99999999999999999999n string, a related issue to CVE-2008-1391.

Affected configurations

NVD
Node
gnuglibcRange≀2.9
OR
gnuglibcMatch1.00
OR
gnuglibcMatch1.01
OR
gnuglibcMatch1.02
OR
gnuglibcMatch1.03
OR
gnuglibcMatch1.04
OR
gnuglibcMatch1.05
OR
gnuglibcMatch1.06
OR
gnuglibcMatch1.07
OR
gnuglibcMatch1.08
OR
gnuglibcMatch1.09
OR
gnuglibcMatch2.0
OR
gnuglibcMatch2.0.1
OR
gnuglibcMatch2.0.2
OR
gnuglibcMatch2.0.3
OR
gnuglibcMatch2.0.4
OR
gnuglibcMatch2.0.5
OR
gnuglibcMatch2.0.6
OR
gnuglibcMatch2.1
OR
gnuglibcMatch2.1.1
OR
gnuglibcMatch2.1.1.6
OR
gnuglibcMatch2.1.2
OR
gnuglibcMatch2.1.3
OR
gnuglibcMatch2.1.3.10
OR
gnuglibcMatch2.1.9
OR
gnuglibcMatch2.2
OR
gnuglibcMatch2.2.1
OR
gnuglibcMatch2.2.2
OR
gnuglibcMatch2.2.3
OR
gnuglibcMatch2.2.4
OR
gnuglibcMatch2.2.5
OR
gnuglibcMatch2.3
OR
gnuglibcMatch2.3.1
OR
gnuglibcMatch2.3.2
OR
gnuglibcMatch2.3.3
OR
gnuglibcMatch2.3.4
OR
gnuglibcMatch2.3.5
OR
gnuglibcMatch2.3.6
OR
gnuglibcMatch2.3.10
OR
gnuglibcMatch2.4
OR
gnuglibcMatch2.5
OR
gnuglibcMatch2.5.1
OR
gnuglibcMatch2.6
OR
gnuglibcMatch2.6.1
OR
gnuglibcMatch2.7
OR
gnuglibcMatch2.8

Related

cvelist 3
debiancve 3
ubuntucve 3
nvd 3
prion 3
osv 1
debian 2
openvas 16
nessus 12
securityvulns 6
cve 2
seebug 1
gentoo 1
ubuntu 1
suse 1
cvelist
cvelist
CVE-2009-4881
2010-06-01 20:00:00
CVE-2008-1391
2008-03-27 17:00:00
CVE-2009-4880
2010-06-01 20:00:00
debiancve
debiancve
CVE-2009-4881
2010-06-01 20:30:02
CVE-2008-1391
2008-03-27 17:44:00
CVE-2009-4880
2010-06-01 20:30:02
ubuntucve
ubuntucve
CVE-2009-4881
2010-06-01 00:00:00
CVE-2008-1391
2008-03-27 00:00:00
CVE-2009-4880
2010-05-24 00:00:00
nvd
nvd
CVE-2009-4881
2010-06-01 20:30:02
CVE-2008-1391
2008-03-27 17:44:00
CVE-2009-4880
2010-06-01 20:30:02
prion
prion
Integer overflow
2010-06-01 20:30:00
Integer overflow
2008-03-27 17:44:00
Integer overflow
2010-06-01 20:30:00
osv
osv
glibc - several vulnerabilities
2010-06-10 00:00:00
debian
debian
[SECURITY] [DSA 2058-1] New glibc packages fix several vulnerabilities
2010-06-10 08:13:46
[SECURITY] [DSA 2058-1] New glibc packages fix several vulnerabilities
2010-06-10 08:13:46
openvas
openvas
Debian: Security Advisory (DSA-2058-1)
2010-06-10 00:00:00
Debian Security Advisory DSA 2058-1 (glibc, eglibc)
2010-06-10 00:00:00
Mandriva Update for glibc MDVSA-2010:111 (glibc)
2010-06-11 00:00:00
nessus
nessus
Debian DSA-2058-1 : glibc, eglibc - multiple vulnerabilities
2010-06-11 00:00:00
Mandriva Linux Security Advisory : glibc (MDVSA-2010:111)
2010-06-09 00:00:00
GLSA-201011-01 : GNU C library: Multiple vulnerabilities
2010-11-16 00:00:00
securityvulns
securityvulns
SecurityReason: glibc x<=2.10.1 stdio/strfmon.c Multiple vulnerabilities
2009-09-18 00:00:00
[securityreason] *BSD libc (strfmon) Multiple vulnerabilities
2008-03-27 00:00:00
Multiple BSD and Linux systems strfmon() libc / glibc function integer overflow
2009-09-18 00:00:00
cve
cve
CVE-2008-1391
2008-03-27 17:44:00
CVE-2009-4880
2010-06-01 20:30:02
seebug
seebug
倚δΈͺBSD平台'strfmon()'ε‡½ζ•°ζ•΄ζ•°ζΊ’ε‡ΊζΌζ΄ž
2008-03-29 00:00:00
gentoo
gentoo
GNU C library: Multiple vulnerabilities
2010-11-15 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2010-05-25 00:00:00
suse
suse
local privilege escalation in glibc
2010-10-28 13:41:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.8%

JSON
Related for CVE-2009-4881
cvelist3debiancve3ubuntucve3nvd3prion3osv1debian2openvas16nessus12securityvulns6cve2seebug1gentoo1ubuntu1suse1