Gnu c Library "fnmatch ()" Integer Overflow Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
GNU glibc 2.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2011-1659

Gnu c Library is the implementation of C Library in the latest GNU system and Linux kernel system.

The gnu c Library "fnmatch ()" integer has an Overflow Denial Of Service Vulnerability. Malicious users can exploit this vulnerability to cause a denial of service.

This vulnerability is caused by the Integer Overflow Vulnerability of the "fnmatch ()" function.

<* Link: http://sourceware.org/bugzilla/show_bug.cgi? Id = 12583
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

GNU
---
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.gnu.org