GNU Eglibc vulnerabilities

3 CVEs affecting GNU Eglibc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2702, published 2014-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-1071, published 2011-04-08. Medium severity, CVSS 5.1. EPSS: 14.3% chance of exploitation in the next 30 days. The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a…
CVE-2013-4788, published 2013-10-04. Medium severity, CVSS 5.1. EPSS: 11.4% chance of exploitation in the next 30 days. The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it…
CVE-2011-2702, published 2014-10-27. Medium severity, CVSS 6.8. EPSS: 8.5% chance of exploitation in the next 30 days. Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers to execute arbitrary…