CVE-2011-5320: Buffer Overflow
It was reported [1] that scanf and related functions are crashing due to a bug [2] in glibc.
[1]: http://seclists.org/oss-sec/2015/q1/686 [2]: https://sourceware.org/bugzilla/showbug.cgi?id=13138
Other sources
scanf and related functions in glibc before 2.15 allow local users to cause a denial of service (segmentation fault) via a large string of 0s.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5320?
CVE-2011-5320 has been classified as a moderate severity vulnerability that can lead to application crashes.
What systems are affected by CVE-2011-5320?
CVE-2011-5320 affects glibc versions prior to 2.15 as well as GNU C Library versions up to 2.14.1.
How do I fix CVE-2011-5320?
To mitigate CVE-2011-5320, upgrade glibc to version 2.15 or later.
What are the symptoms of CVE-2011-5320?
The main symptom of CVE-2011-5320 is unexpected application crashes when using scanf and related functions.
Is there a workaround for CVE-2011-5320?
There are no effective workarounds for CVE-2011-5320 other than updating to the fixed version.