CVE Feed

    Dashboard / CVE / CVE-2011-2702

    CVE-2011-2702

    Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to (1) memcpy-ssse3-rep.S, (2) memcpy-ssse3.S, or (3) memset-sse2.S in sysdeps/i386/i686/multiarch/, which triggers an out-of-bounds read, as demonstrated using the memcpy function.

    Published:Oct 27, 2014
    Last Modified:Apr 12, 2025
    EPS:Oct 27, 2014
    EPSS Score:0.04486
    CVSS Score:6.8

    Affected Products

    Vendor
    Gnu
    Product
    Eglibc
    Vendor
    Gnu
    Product
    Glibc

    Exploits

    http://xorl.wordpress.com/2011/08/06/cve-2011-2702-eglibc-and-glibc-signedness-issue/http://xorl.wordpress.com/2011/08/06/cve-2011-2702-eglibc-and-glibc-signedness-issue/https://www.exploit-db.com/exploits/20167

    References

    http://seclists.org/oss-sec/2011/q3/123
    http://seclists.org/oss-sec/2011/q3/153
    http://www.eglibc.org/cgi-bin/viewvc.cgi/trunk/libc/ChangeLog?view=markup&pathrev=10032
    http://www.nodefense.org/eglibc.txt
    http://www.osvdb.org/80718
    http://xorl.wordpress.com/2011/08/06/cve-2011-2702-eglibc-and-glibc-signedness-issue/
    https://bugzilla.novell.com/show_bug.cgi?id=706915
    https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=a0ac24d98ace90d1ccba6a2f3e7d55600f2fdb6e
    http://seclists.org/oss-sec/2011/q3/123
    http://seclists.org/oss-sec/2011/q3/153
    http://www.eglibc.org/cgi-bin/viewvc.cgi/trunk/libc/ChangeLog?view=markup&pathrev=10032
    http://www.nodefense.org/eglibc.txt
    http://www.osvdb.org/80718
    http://xorl.wordpress.com/2011/08/06/cve-2011-2702-eglibc-and-glibc-signedness-issue/
    https://bugzilla.novell.com/show_bug.cgi?id=706915
    https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=a0ac24d98ace90d1ccba6a2f3e7d55600f2fdb6e

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High