CVE-2009-4880
published 2010-06-01CVE-2009-4880: Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to…
PriorityP428medium5CVSS 2.0
AVNACLAuNCNINAP
EXPLOIT
EPSS
11.22%
95.5th percentile
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391.
Affected
42 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | glibc | < glibc 2.11.1-1 (bookworm) | glibc 2.11.1-1 (bookworm) |
| gnu | glibc | <= 2.10.1 | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5LOW
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
(32-bit): Multiple integer overflows in the printf implementation
vendor_redhat·2009-09-03·CVSS 7.5
CVE-2009-4880 [HIGH] CWE-190 (32-bit): Multiple integer overflows in the printf implementation
(32-bit): Multiple integer overflows in the printf implementation
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391.
Statement: Red Hat does not consider this bug to be a security issue. Properly written application should not use arbitrary untrusted data as part of the format string passed to functions as strfmon or printf family functions.
Debian
CVE-2009-4880: glibc - Multiple integer overflows in the strfmon implementation in the GNU C Library (a...
vendor_debian·2009·CVSS 7.5
CVE-2009-4880 [HIGH] CVE-2009-4880: glibc - Multiple integer overflows in the strfmon implementation in the GNU C Library (a...
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391.
Scope: local
bookworm: resolved (fixed in 2.11.1-1)
bullseye: resolved (fixed in 2.11.1-1)
forky: resolved (fixed in 2.11.1-1)
sid: resolved (fixed in 2.11.1-1)
trixie: resolved (fixed in 2.11.1-1)
GHSA
GHSA-362p-9mx3-r47m: Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2
ghsa_unreviewed·2022-05-02·CVSS 7.5
CVE-2009-4880 [HIGH] GHSA-362p-9mx3-r47m: Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391.
OSV
CVE-2009-4880: Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2
osv·2010-06-01·CVSS 7.5
CVE-2009-4880 [HIGH] CVE-2009-4880: Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391.
No detection rules found.
Bugzilla
CVE-2009-4881 glibc (32-bit): Integer overflow in the __vstrfmon_l function
bugzilla·2010-06-02·CVSS 7.5
CVE-2009-4881 [HIGH] CVE-2009-4881 glibc (32-bit): Integer overflow in the __vstrfmon_l function
CVE-2009-4881 glibc (32-bit): Integer overflow in the __vstrfmon_l function
Common Vulnerabilities and Exposures assigned an identifier CVE-2009-4881 to
the following vulnerability:
Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in
the strfmon implementation in the GNU C Library (aka glibc or libc6)
before 2.10.1 allows context-dependent attackers to cause a denial of
service (application crash) via a crafted format string, as
demonstrated by the %99999999999999999999n string, a related issue to
CVE-2008-1391.
References:
[1] http://sources.redhat.com/bugzilla/show_bug.cgi?id=10600
[2] http://sourceware.org/git/?p=glibc.git;a=commit;h=153aa31b93be22e01b236375fb02a9f9b9a0195f
[3] http://sources.redhat.com/bugzilla/show_bug.cgi?id=10600
[4] http://securityreason.com/a
Bugzilla
CVE-2009-4880 glibc (32-bit): Multiple integer overflows in the printf implementation
bugzilla·2010-06-02·CVSS 7.5
CVE-2009-4880 [HIGH] CVE-2009-4880 glibc (32-bit): Multiple integer overflows in the printf implementation
CVE-2009-4880 glibc (32-bit): Multiple integer overflows in the printf implementation
Common Vulnerabilities and Exposures assigned an identifier CVE-2009-4880 to
the following vulnerability:
Multiple integer overflows in the strfmon implementation in the GNU C
Library (aka glibc or libc6) 2.10.1 and earlier allow
context-dependent attackers to cause a denial of service (memory
consumption or application crash) via a crafted format string, as
demonstrated by a crafted first argument to the money_format function
in PHP, a related issue to CVE-2008-1391.
References:
[1] http://securityreason.com/achievement_securityalert/67
[2] https://bugzilla.redhat.com/show_bug.cgi?id=524671
[3] http://sources.redhat.com/bugzilla/show_bug.cgi?id=10600
[4] http://sourceware.org/git/?p=glibc.git;a=commit
Bugzilla
CVE-2008-1391 glibc: strfmon format string problem
bugzilla·2009-09-21·CVSS 7.5
CVE-2008-1391 [HIGH] CVE-2008-1391 glibc: strfmon format string problem
CVE-2008-1391 glibc: strfmon format string problem
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-1391 to
the following vulnerability:
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
https://bugzilla.novell.com/show_bug.cgi?id=375315
http://www.securityfocus.com/bid/36443/references
http://securityreason.com/achievement_securityalert/67
Discus
http://secunia.com/advisories/39900http://security.gentoo.org/glsa/glsa-201011-01.xmlhttp://securityreason.com/achievement_securityalert/67http://sources.redhat.com/bugzilla/show_bug.cgi?id=10600http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=199eb0de8d673fb23aa127721054b4f1803d61f3http://www.debian.org/security/2010/dsa-2058http://www.mandriva.com/security/advisories?name=MDVSA-2010:111http://www.mandriva.com/security/advisories?name=MDVSA-2010:112http://www.securityfocus.com/bid/36443http://www.ubuntu.com/usn/USN-944-1http://www.vupen.com/english/advisories/2010/1246https://bugzilla.redhat.com/show_bug.cgi?id=524671https://exchange.xforce.ibmcloud.com/vulnerabilities/59242http://secunia.com/advisories/39900http://security.gentoo.org/glsa/glsa-201011-01.xmlhttp://securityreason.com/achievement_securityalert/67http://sources.redhat.com/bugzilla/show_bug.cgi?id=10600http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=199eb0de8d673fb23aa127721054b4f1803d61f3http://www.debian.org/security/2010/dsa-2058http://www.mandriva.com/security/advisories?name=MDVSA-2010:111http://www.mandriva.com/security/advisories?name=MDVSA-2010:112http://www.securityfocus.com/bid/36443http://www.ubuntu.com/usn/USN-944-1http://www.vupen.com/english/advisories/2010/1246https://bugzilla.redhat.com/show_bug.cgi?id=524671https://exchange.xforce.ibmcloud.com/vulnerabilities/59242
2010-06-01
Published