The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.

🗓️ 04 Sep 2025 11:29:41Reported by MicrosoftType

Glibc globbing can cause denial of service by crafted nonmatching expressions from users.

Reporter	Title	Published	Views	Family All 80
0day.today	Multiple Vendors libc/glob(3) Resource Exhaustion (remote ftpd-anon)	8 Oct 201000:00	–	zdt
0day.today	FreeBSD 9.1 ftpd Remote Denial of Service	5 Feb 201300:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	27 Jun 202422:37	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	4 Sep 202522:39	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several issues due to open source packages	19 Nov 202514:30	–	ibm
FreeBSD	FreeBSD -- glob(3) related resource exhaustion	19 Feb 201300:00	–	freebsd
Tenable Nessus	Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities	23 Jun 201100:00	–	nessus
Tenable Nessus	Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities	23 Jun 201100:00	–	nessus
Tenable Nessus	FreeBSD : FreeBSD -- glob(3) related resource exhaustion (3c90e093-7c6e-11e2-809b-6c626d99876c)	22 Feb 201300:00	–	nessus
Tenable Nessus	Juniper Junos GNU libc glob Remote DoS (JSA10598)	17 Oct 201300:00	–	nessus