CVE Vulnerabilities

CVE-2009-4880

Published: Jun 01, 2010 | Modified: Nov 07, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
LOW

Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391.

Affected Software

Name Vendor Start Version End Version
Glibc Gnu * 2.10.1 (including)
Glibc Gnu 2.0 (including) 2.0 (including)
Glibc Gnu 2.0.1 (including) 2.0.1 (including)
Glibc Gnu 2.0.2 (including) 2.0.2 (including)
Glibc Gnu 2.0.3 (including) 2.0.3 (including)
Glibc Gnu 2.0.4 (including) 2.0.4 (including)
Glibc Gnu 2.0.5 (including) 2.0.5 (including)
Glibc Gnu 2.0.6 (including) 2.0.6 (including)
Glibc Gnu 2.1 (including) 2.1 (including)
Glibc Gnu 2.1.1 (including) 2.1.1 (including)
Glibc Gnu 2.1.1.6 (including) 2.1.1.6 (including)
Glibc Gnu 2.1.2 (including) 2.1.2 (including)
Glibc Gnu 2.1.3 (including) 2.1.3 (including)
Glibc Gnu 2.1.9 (including) 2.1.9 (including)
Glibc Gnu 2.2 (including) 2.2 (including)
Glibc Gnu 2.2.1 (including) 2.2.1 (including)
Glibc Gnu 2.2.2 (including) 2.2.2 (including)
Glibc Gnu 2.2.3 (including) 2.2.3 (including)
Glibc Gnu 2.2.4 (including) 2.2.4 (including)
Glibc Gnu 2.2.5 (including) 2.2.5 (including)
Glibc Gnu 2.3 (including) 2.3 (including)
Glibc Gnu 2.3.1 (including) 2.3.1 (including)
Glibc Gnu 2.3.2 (including) 2.3.2 (including)
Glibc Gnu 2.3.3 (including) 2.3.3 (including)
Glibc Gnu 2.3.4 (including) 2.3.4 (including)
Glibc Gnu 2.3.5 (including) 2.3.5 (including)
Glibc Gnu 2.3.6 (including) 2.3.6 (including)
Glibc Gnu 2.3.10 (including) 2.3.10 (including)
Glibc Gnu 2.4 (including) 2.4 (including)
Glibc Gnu 2.5 (including) 2.5 (including)
Glibc Gnu 2.5.1 (including) 2.5.1 (including)
Glibc Gnu 2.6 (including) 2.6 (including)
Glibc Gnu 2.6.1 (including) 2.6.1 (including)
Glibc Gnu 2.7 (including) 2.7 (including)
Glibc Gnu 2.8 (including) 2.8 (including)
Glibc Gnu 2.9 (including) 2.9 (including)
Glibc Gnu 2.10 (including) 2.10 (including)
Eglibc Ubuntu karmic *
Eglibc Ubuntu lucid *
Eglibc Ubuntu upstream *
Glibc Ubuntu dapper *
Glibc Ubuntu hardy *
Glibc Ubuntu jaunty *

References