DEBIAN-CVE-2009-4881

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2009-4881
Downstream
DSA-2058-1
Published: 01 Jun 2010, 20:30
Last modified:28 Apr 2026, 20:11

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

01 Jun 2010, 20:30
Published
Vulnerability first disclosed
28 Apr 2026, 20:11
Last Modified
Vulnerability information updated

Description

Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted format string, as demonstrated by the %99999999999999999999n string, a related issue to CVE-2008-1391.

Affected Systems

  • debian•glibc

    < 2.11.1-1 | < 2.11.1-1 | < 2.11.1-1 | < 2.11.1-1

References (1)