QwikSec

Security Database

CVE

CWE

Training

CVE-2010-4052

Published: Jan 13, 2011

Modified: Aug 7, 2024

PUBLISHED

Description

Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_SECTRACK

20110107 GNU libc/regcomp(3) Multiple Vulnerabilities

mailing-list

x_refsource_FULLDISC

third-party-advisory

x_refsource_CERT-VN

vdb-entry

x_refsource_BID

20110107 GNU libc/regcomp(3) Multiple Vulnerabilities

mailing-list

x_refsource_BUGTRAQ

http://cxib.net/stuff/proftpd.gnu.c

x_refsource_MISC

exploit

x_refsource_EXPLOIT-DB

third-party-advisory

x_refsource_SREASON

20110107 GNU libc/regcomp(3) Multiple Vulnerabilities

third-party-advisory

x_refsource_SREASONRES

https://bugzilla.redhat.com/show_bug.cgi?id=645859

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.