Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2011-1089

Published: Apr 10, 2011 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
3.3 LOW
AV:L/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
3.3 LOW
AV:L/AC:M/Au:N/C:P/I:P/A:N
RedHat/V3
Ubuntu
LOW
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2011-1089
CWEhttps://cwe.mitre.org/data/definitions/16.html

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Affected Software

NameVendorStart VersionEnd Version
GlibcGnu*2.13 (including)
GlibcGnu1.00 (including)1.00 (including)
GlibcGnu1.01 (including)1.01 (including)
GlibcGnu1.02 (including)1.02 (including)
GlibcGnu1.03 (including)1.03 (including)
GlibcGnu1.04 (including)1.04 (including)
GlibcGnu1.05 (including)1.05 (including)
GlibcGnu1.06 (including)1.06 (including)
GlibcGnu1.07 (including)1.07 (including)
GlibcGnu1.08 (including)1.08 (including)
GlibcGnu1.09 (including)1.09 (including)
GlibcGnu1.09.1 (including)1.09.1 (including)
GlibcGnu2.0 (including)2.0 (including)
GlibcGnu2.0.1 (including)2.0.1 (including)
GlibcGnu2.0.2 (including)2.0.2 (including)
GlibcGnu2.0.3 (including)2.0.3 (including)
GlibcGnu2.0.4 (including)2.0.4 (including)
GlibcGnu2.0.5 (including)2.0.5 (including)
GlibcGnu2.0.6 (including)2.0.6 (including)
GlibcGnu2.1 (including)2.1 (including)
GlibcGnu2.1.1 (including)2.1.1 (including)
GlibcGnu2.1.1.6 (including)2.1.1.6 (including)
GlibcGnu2.1.2 (including)2.1.2 (including)
GlibcGnu2.1.3 (including)2.1.3 (including)
GlibcGnu2.1.3.10 (including)2.1.3.10 (including)
GlibcGnu2.1.9 (including)2.1.9 (including)
GlibcGnu2.2 (including)2.2 (including)
GlibcGnu2.2.1 (including)2.2.1 (including)
GlibcGnu2.2.2 (including)2.2.2 (including)
GlibcGnu2.2.3 (including)2.2.3 (including)
GlibcGnu2.2.4 (including)2.2.4 (including)
GlibcGnu2.2.5 (including)2.2.5 (including)
GlibcGnu2.3 (including)2.3 (including)
GlibcGnu2.3.1 (including)2.3.1 (including)
GlibcGnu2.3.2 (including)2.3.2 (including)
GlibcGnu2.3.3 (including)2.3.3 (including)
GlibcGnu2.3.4 (including)2.3.4 (including)
GlibcGnu2.3.5 (including)2.3.5 (including)
GlibcGnu2.3.6 (including)2.3.6 (including)
GlibcGnu2.3.10 (including)2.3.10 (including)
GlibcGnu2.4 (including)2.4 (including)
GlibcGnu2.5 (including)2.5 (including)
GlibcGnu2.5.1 (including)2.5.1 (including)
GlibcGnu2.6 (including)2.6 (including)
GlibcGnu2.6.1 (including)2.6.1 (including)
GlibcGnu2.7 (including)2.7 (including)
GlibcGnu2.8 (including)2.8 (including)
GlibcGnu2.9 (including)2.9 (including)
GlibcGnu2.10 (including)2.10 (including)
GlibcGnu2.10.1 (including)2.10.1 (including)
GlibcGnu2.10.2 (including)2.10.2 (including)
GlibcGnu2.11 (including)2.11 (including)
GlibcGnu2.11.1 (including)2.11.1 (including)
GlibcGnu2.11.2 (including)2.11.2 (including)
GlibcGnu2.11.3 (including)2.11.3 (including)
GlibcGnu2.12.0 (including)2.12.0 (including)
GlibcGnu2.12.1 (including)2.12.1 (including)
GlibcGnu2.12.2 (including)2.12.2 (including)
Red Hat Enterprise Linux 4RedHatglibc-0:2.3.4-2.57*
Red Hat Enterprise Linux 5RedHatglibc-0:2.5-65.el5_7.3*
Red Hat Enterprise Linux 6RedHatglibc-0:2.12-1.47.el6*
EglibcUbuntukarmic*
EglibcUbuntulucid*
EglibcUbuntumaverick*
EglibcUbuntunatty*
EglibcUbuntuupstream*
GlibcUbuntudapper*
GlibcUbuntuhardy*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use