QwikSec

Security Database

CVE

CWE

Training

CVE-2013-0242

Published: Feb 8, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.vmware.com/security/advisories/VMSA-2014-0008.html

x_refsource_CONFIRM

glibc-extendbuffers-dos(81707)

vdb-entry

x_refsource_XF

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_UBUNTU

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_OSVDB

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_SECTRACK

[oss-security] 20130130 Re: CVE Request -- glibc: DoS due to a buffer overrun in regexp matcher by processing multibyte characters

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_GENTOO

[libc-alpha] 20130129 [PATCH] Fix buffer overrun in regexp matcher

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_MANDRIVA

http://sourceware.org/bugzilla/show_bug.cgi?id=15078

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.