CVE-2011-1071: GNU Eglibc

Medium severity, CVSS 5.1. EPSS: 14.3% chance of exploitation in the next 30 days.

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.

Affected products

• GNU Eglibc: any version
• GNU Glibc: up to and including 2.12.1; version 1.00 only; version 1.01 only; version 1.02 only; version 1.03 only; version 1.04 only; …

Published 2011-04-08. Last modified 2026-06-16.