Every CVE Search/ Get API key

CVE-2011-1089

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report...

3.3 LowFix available

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Exploit likelihood

0.42%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.3

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Record
CVE-2011-1089
CVSS 2.0
3.3 LowAV:L/AC:M/Au:N/C:P/I:P/A:N
Weakness
CWE-16
Updated
2026-11-02
CVE List No score

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Record
CVE-2011-1089
Updated
2026-11-02
EUVDEUVD-2011-1103 No score

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Record
EUVD-2011-1103
Updated
2026-11-03
GitHub AdvisoriesGHSA-h832-96qp-642g No score

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report...

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Record
GHSA-h832-96qp-642g
Updated
2026-11-02
OSV No score

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Record
CVE-2011-1089
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1089 No score

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Record
DEBIAN-CVE-2011-1089
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glibc
Debian:12
 before 2.13-8
2.13-8
glibc
Debian:13
 before 2.13-8
2.13-8
glibc
Debian:14
 before 2.13-8
2.13-8
glibc
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-debuginfo-common
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-static
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-common
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-headers
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
Show 85 moreShow less
Affected packages
PackageAffectedFixed
glibc-utils
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
nscd
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-debuginfo-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-static
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-headers
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-utils
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
nscd
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-debuginfo-common
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-static
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-common
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-headers
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-utils
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
nscd
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-debuginfo-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-static
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-headers
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc-utils
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
nscd
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.12-1.47.el6
0:2.12-1.47.el6
glibc
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-common
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo-common
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-headers
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-profile
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-utils
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
nptl-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
nscd
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-common
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo-common
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-headers
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-profile
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-utils
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
nptl-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
nscd
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-common
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo-common
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-headers
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-profile
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-utils
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
nptl-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
nscd
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-common
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo-common
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-headers
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-profile
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-utils
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
nptl-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
nscd
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
 before 0:2.3.4-2.57
0:2.3.4-2.57
glibc
Red Hat:enterprise_linux:5::client
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-common
Red Hat:enterprise_linux:5::client
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-debuginfo-common
Red Hat:enterprise_linux:5::client
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-headers
Red Hat:enterprise_linux:5::client
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-utils
Red Hat:enterprise_linux:5::client
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
nscd
Red Hat:enterprise_linux:5::client
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-common
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-debuginfo-common
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-headers
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
glibc-utils
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3
nscd
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
 before 0:2.5-65.el5_7.3
0:2.5-65.el5_7.3

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1089 is a low vulnerability (CVSS 3.3) in Gnu Glibc, published April 10, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in glibc 2.13-8.

References

Show 76 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open