Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4052
HistoryJan 13, 2011 - 7:00 p.m.

CVE-2010-4052

2011-01-1319:00:02
CWE-399
[email protected]
web.nvd.nist.gov
4

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.2

Confidence

High

EPSS

0.023

Percentile

89.7%

JSON

Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.

Affected configurations

NVD
Node
gnuglibcMatch1.00
OR
gnuglibcMatch1.01
OR
gnuglibcMatch1.02
OR
gnuglibcMatch1.03
OR
gnuglibcMatch1.04
OR
gnuglibcMatch1.05
OR
gnuglibcMatch1.06
OR
gnuglibcMatch1.07
OR
gnuglibcMatch1.08
OR
gnuglibcMatch1.09
OR
gnuglibcMatch1.09.1
OR
gnuglibcMatch2.1
OR
gnuglibcMatch2.1.1
OR
gnuglibcMatch2.1.1.6
OR
gnuglibcMatch2.1.2
OR
gnuglibcMatch2.1.3
OR
gnuglibcMatch2.1.3.10
OR
gnuglibcMatch2.1.9
OR
gnuglibcMatch2.10
OR
gnuglibcMatch2.10.1
OR
gnuglibcMatch2.10.2
OR
gnuglibcMatch2.11
OR
gnuglibcMatch2.11.1
OR
gnuglibcMatch2.11.2
OR
gnuglibcMatch2.11.3
OR
gnuglibcMatch2.12.0
OR
gnuglibcMatch2.12.1
OR
gnuglibcMatch2.12.2

Related

prion 1
f5 2
debiancve 1
cve 1
ubuntucve 2
cvelist 1
securityvulns 4
cert 1
exploitpack 3
seebug 2
openvas 1
nessus 2
packetstorm 2
fedora 1
hackerone 1
prion
prion
Design/Logic Flaw
2011-01-13 19:00:00
f5
f5
SOL12794 - GNU C Library vulnerability CVE-2010-4052
2011-04-08 00:00:00
K12794 : GNU C Library vulnerability CVE-2010-4052
2013-09-04 00:00:00
debiancve
debiancve
CVE-2010-4052
2011-01-13 19:00:02
cve
cve
CVE-2010-4052
2011-01-13 19:00:02
ubuntucve
ubuntucve
CVE-2010-4052
2011-01-13 00:00:00
CVE-2011-3336
2020-02-12 00:00:00
cvelist
cvelist
CVE-2010-4052
2011-01-13 18:35:00
securityvulns
securityvulns
GNU libc regcomp buffer overflow / resources exhaustion
2014-03-18 00:00:00
GNU libc/regcomp(3) Multiple Vulnerabilities
2011-01-07 00:00:00
MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service
2014-03-18 00:00:00
cert
cert
GNU libc regcomp() stack exhaustion denial of service
2010-12-07 00:00:00
exploitpack
exploitpack
GNU glibc - regcomp() Stack Exhaustion Denial of Service
2010-12-07 00:00:00
GNU libcregcomp(3) - Multiple Vulnerabilities
2011-01-07 00:00:00
FreeBSD 9.1 - ftpd Remote Denial of Service
2013-02-05 00:00:00
seebug
seebug
GNU libc/regcomp(3) Multiple Vulnerabilities
2014-07-01 00:00:00
FreeBSD 9.1 ftpd Remote Denial of Service
2014-07-01 00:00:00
openvas
openvas
Juniper Networks Junos OS Stack Exhaustion Denial of Service Vulnerability
2014-01-09 00:00:00
nessus
nessus
Juniper Junos CLI libc recomp() rpd DoS (JSA10612)
2014-01-16 00:00:00
Fedora 15 : proftpd-1.3.4-0.8.rc2.fc15 (2011-5098)
2011-04-18 00:00:00
packetstorm
packetstorm
BSD libc/regcomp(3) Memory Management / Recursion
2011-11-04 00:00:00
OS X / Safari / Firefox REGEX Denial Of Service
2014-03-14 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: proftpd-1.3.4-0.8.rc2.fc15
2011-04-15 21:49:25
hackerone
hackerone
GitLab: Container scanning and Dependency scanning report leaked to unauthorized users
2019-08-19 22:30:30

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.2

Confidence

High

EPSS

0.023

Percentile

89.7%

JSON
Related for NVD:CVE-2010-4052
prion1f52debiancve1cve1ubuntucve2cvelist1securityvulns4cert1exploitpack3seebug2openvas1nessus2packetstorm2fedora1hackerone1