© 2026 vulntracker.io

CVE-2009-4881

N/A

Published: June 1, 2010 at 08:00 PM UTC

Updated: June 16, 2026 at 11:14 PM UTC

1 product affected across 1 vendorGlibc

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 2%

Description

Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted format string, as demonstrated by the %99999999999999999999n string, a related issue to CVE-2008-1391.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

95%

v ≤ 2.91.00 1.01 1.02 1.03 1.04 1.05 1.06 1.07 1.08 1.09 2.0 2.0.1 2.0.2 2.0.3 2.0.4 2.0.5 2.0.6 2.1 2.1.1 2.1.1.6 2.1.2 2.1.3 2.1.3.10 2.1.9 2.2 2.2.1 2.2.2 2.2.3 2.2.4 2.2.5 2.3 2.3.1 2.3.10 2.3.2 2.3.3 2.3.4 2.3.5 2.3.6 2.4 2.5 2.5.1 2.6 2.6.1 2.7 2.8

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (6)

Vendor Advisoryx_refsource_GENTOO

Source: [email protected]

http://security.gentoo.org/glsa/glsa-201011-01.xml

x_refsource_CONFIRM

Source: [email protected]

http://sources.redhat.com/bugzilla/show_bug.cgi?id=10600

x_refsource_CONFIRM

Source: [email protected]

http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=153aa31b93be22e01b236375fb02a9f9b9a0195f

Vendor Advisoryx_refsource_DEBIAN

Source: [email protected]

http://www.debian.org/security/2010/dsa-2058

Vendor Advisoryx_refsource_MANDRIVA

Source: [email protected]

http://www.mandriva.com/security/advisories?name=MDVSA-2010:111

VDB Entryx_refsource_XF

Source: [email protected]

https://exchange.xforce.ibmcloud.com/vulnerabilities/59241

CVSS

5MEDIUM[email protected]

Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-189

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card