CVE-2011-1659
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier...
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
Exploit likelihood
What each source reports
NVD Score used
5.0
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
- Record
CVE-2011-1659- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
- Record
CVE-2011-1659- Updated
- 2026-11-02
EUVDEUVD-2011-1659 No score
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
- Record
EUVD-2011-1659- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q5rg-jqvh-mj2q No score
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier...
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
- Record
GHSA-q5rg-jqvh-mj2q- Updated
- 2026-11-02
OSVBELL-CVE-2011-1659
5.0
CVE-2011-1659 does not affect BellSoft software
- Record
BELL-CVE-2011-1659- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSV No score
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
- Record
CVE-2011-1659- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1659 No score
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
- Record
DEBIAN-CVE-2011-1659- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glibcDebian:12 |
before 2.13-8 | 2.13-8 |
glibcDebian:13 |
before 2.13-8 | 2.13-8 |
glibcDebian:14 |
before 2.13-8 | 2.13-8 |
glibcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.5-58.el5_6.2 | 0:2.5-58.el5_6.2 |
glibc-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.5-58.el5_6.2 | 0:2.5-58.el5_6.2 |
glibc-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.5-58.el5_6.2 | 0:2.5-58.el5_6.2 |
glibc-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.5-58.el5_6.2 | 0:2.5-58.el5_6.2 |
glibc-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.5-58.el5_6.2 | 0:2.5-58.el5_6.2 |
glibc-headersRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.5-58.el5_6.2 | 0:2.5-58.el5_6.2 |
glibc-utilsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.5-58.el5_6.2 | 0:2.5-58.el5_6.2 |
Show 73 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nscdRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.5-58.el5_6.2 | 0:2.5-58.el5_6.2 |
glibcRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-staticRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-commonRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-develRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-headersRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-utilsRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
nscdRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibcRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-staticRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
nscdRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-commonRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-develRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-utilsRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibcRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-staticRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-commonRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-develRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-headersRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-utilsRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
nscdRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibcRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-staticRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-commonRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-develRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibc-utilsRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
nscdRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:2.12-1.7.el6_0.5 | 0:2.12-1.7.el6_0.5 |
glibcRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-commonRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfo-commonRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-headersRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-profileRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-utilsRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nptl-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nscdRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibcRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-commonRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfo-commonRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-headersRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-profileRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-utilsRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nptl-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nscdRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibcRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-commonRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfo-commonRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-headersRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-profileRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-utilsRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nptl-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nscdRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibcRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-commonRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfo-commonRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-headersRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-profileRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-utilsRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nptl-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nscdRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1659 is a medium vulnerability (CVSS 5.0) in Gnu Glibc, published April 8, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. Fixed in glibc 2.13-8.
References
bugzilla.redhat.com/show_bug.cgi?id=681054
securityfocus.com/archive/1/520102/100/0/threaded
secunia.com/advisories/46397
secunia.com/advisories/44353
securitytracker.com/id?1025450
exchange.xforce.ibmcloud.com/vulnerabilities/66819
Show 62 moreShow less
mandriva.com/security/advisories?name=MDVSA-2011:178
scarybeastsecurity.blogspot.com/2011/02/i-got-accidental-code-execution-via.html
vmware.com/security/advisories/VMSA-2011-0012.html
code.google.com/p/chromium/issues/detail?id=48733
mandriva.com/security/advisories?name=MDVSA-2011:179
sourceware.org/bugzilla/show_bug.cgi?id=12583
sourceware.org/git?p=glibc.git%3Ba=commit%3Bh=8126d90480fa3e0c5c5cd0d02cb1c93174b45485
nvd.nist.gov/vuln/detail/CVE-2011-1659
sourceware.org/git?p=glibc.git;a=commit;h=8126d90480fa3e0c5c5cd0d02cb1c93174b45485
github.com/advisories/GHSA-q5rg-jqvh-mj2q
docs.bell-sw.com/security/cves/CVE-2011-1659
security-tracker.debian.org/tracker/CVE-2011-1659
access.redhat.com/errata/RHSA-2011:0412
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=559579
bugzilla.redhat.com/show_bug.cgi?id=625893
bugzilla.redhat.com/show_bug.cgi?id=667974
bugzilla.redhat.com/show_bug.cgi?id=682991
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0412.json
access.redhat.com/security/cve/CVE-2010-0296
cve.org/CVERecord?id=CVE-2010-0296
nvd.nist.gov/vuln/detail/CVE-2010-0296
access.redhat.com/security/cve/CVE-2011-0536
cve.org/CVERecord?id=CVE-2011-0536
nvd.nist.gov/vuln/detail/CVE-2011-0536
access.redhat.com/security/cve/CVE-2011-1071
cve.org/CVERecord?id=CVE-2011-1071
nvd.nist.gov/vuln/detail/CVE-2011-1071
access.redhat.com/security/cve/CVE-2011-1095
cve.org/CVERecord?id=CVE-2011-1095
nvd.nist.gov/vuln/detail/CVE-2011-1095
access.redhat.com/security/cve/CVE-2011-1658
bugzilla.redhat.com/show_bug.cgi?id=694873
cve.org/CVERecord?id=CVE-2011-1658
nvd.nist.gov/vuln/detail/CVE-2011-1658
access.redhat.com/security/cve/CVE-2011-1659
cve.org/CVERecord?id=CVE-2011-1659
access.redhat.com/errata/RHSA-2011:0413
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0413.json
access.redhat.com/errata/RHSA-2012:0125
bugzilla.redhat.com/show_bug.cgi?id=599056
bugzilla.redhat.com/show_bug.cgi?id=657009
bugzilla.redhat.com/show_bug.cgi?id=688980
bugzilla.redhat.com/show_bug.cgi?id=692393
bugzilla.redhat.com/show_bug.cgi?id=761245
bugzilla.redhat.com/show_bug.cgi?id=767299
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0125.json
access.redhat.com/security/cve/CVE-2009-5029
cve.org/CVERecord?id=CVE-2009-5029
nvd.nist.gov/vuln/detail/CVE-2009-5029
access.redhat.com/security/cve/CVE-2009-5064
cve.org/CVERecord?id=CVE-2009-5064
nvd.nist.gov/vuln/detail/CVE-2009-5064
access.redhat.com/security/cve/CVE-2010-0830
cve.org/CVERecord?id=CVE-2010-0830
nvd.nist.gov/vuln/detail/CVE-2010-0830
access.redhat.com/security/cve/CVE-2011-1089
cve.org/CVERecord?id=CVE-2011-1089
nvd.nist.gov/vuln/detail/CVE-2011-1089
access.redhat.com/security/cve/CVE-2011-4609
cve.org/CVERecord?id=CVE-2011-4609
nvd.nist.gov/vuln/detail/CVE-2011-4609