Lucene search
Ubuntu.comUB:CVE-2010-4051HistoryJan 13, 2011 - 12:00 a.m.
CVE-2010-4051
2011-01-1300:00:00
ubuntu.com
ubuntu.com
5
The regcomp implementation in the GNU C Library (aka glibc or libc6)
through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent
attackers to cause a denial of service (application crash) via a regular
expression containing adjacent bounded repetitions that bypass the intended
RE_DUP_MAX limitation, as demonstrated by a {10,}{10,}{10,}{10,}{10,}
sequence in the proftpd.gnu.c exploit for ProFTPD, related to a “RE_DUP_MAX
overflow.”
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=645859>
- <https://bugs.launchpad.net/ubuntu/+source/glibc/+bug/343894>
Notes
| Author | Note |
|---|---|
| mdeslaur | debatable wheither this is a security issue or not. application should impose limits and filtering. Ignoring. |
Related
f5
f5
K12793 : GNU C Library vulnerability CVE-2010-4051
2013-09-11 00:00:00
SOL12793 - GNU C Library vulnerability CVE-2010-4051
2011-04-15 00:00:00
cvelist
cvelist
CVE-2010-4051
2011-01-13 18:35:00
prion
prion
Design/Logic Flaw
2011-01-13 19:00:00
debiancve
debiancve
CVE-2010-4051
2011-01-13 19:00:00
cve
cve
CVE-2010-4051
2011-01-13 19:00:00
cert
cert
GNU libc regcomp() stack exhaustion denial of service
2010-12-07 00:00:00
exploitpack
exploitpack
GNU glibc - regcomp() Stack Exhaustion Denial of Service
2010-12-07 00:00:00
GNU libcregcomp(3) - Multiple Vulnerabilities
2011-01-07 00:00:00
FreeBSD 9.1 - ftpd Remote Denial of Service
2013-02-05 00:00:00
securityvulns
securityvulns
GNU libc/regcomp(3) Multiple Vulnerabilities
2011-01-07 00:00:00
GNU libc regcomp buffer overflow / resources exhaustion
2014-03-18 00:00:00
MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service
2014-03-18 00:00:00
seebug
seebug
GNU libc/regcomp(3) Multiple Vulnerabilities
2014-07-01 00:00:00
FreeBSD 9.1 ftpd Remote Denial of Service
2014-07-01 00:00:00
nessus
nessus
Juniper Junos CLI libc recomp() rpd DoS (JSA10612)
2014-01-16 00:00:00
Fedora 15 : proftpd-1.3.4-0.8.rc2.fc15 (2011-5098)
2011-04-18 00:00:00
openvas
openvas
Juniper Networks Junos OS Stack Exhaustion Denial of Service Vulnerability
2014-01-09 00:00:00
exploitdb
exploitdb
GNU glibc - 'regcomp()' Stack Exhaustion Denial of Service
2010-12-07 00:00:00
GNU libc/regcomp(3) - Multiple Vulnerabilities
2011-01-07 00:00:00
FreeBSD 9.1 - 'ftpd' Remote Denial of Service
2013-02-05 00:00:00
packetstorm
packetstorm
BSD libc/regcomp(3) Memory Management / Recursion
2011-11-04 00:00:00
OS X / Safari / Firefox REGEX Denial Of Service
2014-03-14 00:00:00
ubuntucve
ubuntucve
CVE-2011-3336
2020-02-12 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: proftpd-1.3.4-0.8.rc2.fc15
2011-04-15 21:49:25