NVD

Id
9439  
Name
CVE-2011-2702  
Description
Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to (1) memcpy-ssse3-rep.S, (2) memcpy-ssse3.S, or (3) memset-sse2.S in sysdeps/i386/i686/multiarch/, which triggers an out-of-bounds read, as demonstrated using the memcpy function.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2014-10-27  
Modified Date
2014-10-30  
Seq
2011-2702  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53901 9439 CVE-2011-2702 [oss-security] 20110718 CVE id request: (e)glibc  View
53902 9439 CVE-2011-2702 [oss-security] 20110720 Re: CVE id request: (e)glibc  View
53903 9439 CVE-2011-2702 http://www.eglibc.org/cgi-bin/viewvc.cgi/trunk/libc/ChangeLog?view=markup&pathrev=10032  View
53904 9439 CVE-2011-2702 http://www.nodefense.org/eglibc.txt  View
53905 9439 CVE-2011-2702 http://xorl.wordpress.com/2011/08/06/cve-2011-2702-eglibc-and-glibc-signedness-issue/  View
53906 9439 CVE-2011-2702 https://bugzilla.novell.com/show_bug.cgi?id=706915  View
53907 9439 CVE-2011-2702 https://sourceware.org/git/?p=glibc.git;a=commit;h=a0ac24d98ace90d1ccba6a2f3e7d55600f2fdb6e  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35103 JVNDB-2011-005345 Glibc および eglibc における整数符号エラーの脆弱性 Glibc および eglibc には、Supplemental Streaming SIMD Extensions 3 (SSSE3) の最適化を使用する場合、整数符号エラーの脆弱性が存在します。 CVE-2011-2702 50609 CVE-2011-2702 9439 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005345.html 2011-07-18 2014-10-30 View