Lucene search
Ubuntu.comUB:CVE-2010-4052HistoryJan 13, 2011 - 12:00 a.m.
CVE-2010-4052
2011-01-1300:00:00
ubuntu.com
ubuntu.com
4
Stack consumption vulnerability in the regcomp implementation in the GNU C
Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2,
allows context-dependent attackers to cause a denial of service (resource
exhaustion) via a regular expression containing adjacent repetition
operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the
proftpd.gnu.c exploit for ProFTPD.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=645859>
- <https://bugs.launchpad.net/ubuntu/+source/glibc/+bug/343894>
Notes
| Author | Note |
|---|---|
| mdeslaur | debatable wheither this is a security issue or not. application should impose limits and filtering. Ignoring. |
Related
cve
cve
CVE-2010-4052
2011-01-13 19:00:00
f5
f5
K12794 : GNU C Library vulnerability CVE-2010-4052
2013-09-04 00:00:00
SOL12794 - GNU C Library vulnerability CVE-2010-4052
2011-04-08 00:00:00
prion
prion
Design/Logic Flaw
2011-01-13 19:00:00
debiancve
debiancve
CVE-2010-4052
2011-01-13 19:00:00
cvelist
cvelist
CVE-2010-4052
2011-01-13 18:35:00
cert
cert
GNU libc regcomp() stack exhaustion denial of service
2010-12-07 00:00:00
exploitpack
exploitpack
GNU glibc - regcomp() Stack Exhaustion Denial of Service
2010-12-07 00:00:00
GNU libcregcomp(3) - Multiple Vulnerabilities
2011-01-07 00:00:00
FreeBSD 9.1 - ftpd Remote Denial of Service
2013-02-05 00:00:00
securityvulns
securityvulns
GNU libc/regcomp(3) Multiple Vulnerabilities
2011-01-07 00:00:00
GNU libc regcomp buffer overflow / resources exhaustion
2014-03-18 00:00:00
MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service
2014-03-18 00:00:00
seebug
seebug
GNU libc/regcomp(3) Multiple Vulnerabilities
2014-07-01 00:00:00
FreeBSD 9.1 ftpd Remote Denial of Service
2014-07-01 00:00:00
nessus
nessus
Juniper Junos CLI libc recomp() rpd DoS (JSA10612)
2014-01-16 00:00:00
Fedora 15 : proftpd-1.3.4-0.8.rc2.fc15 (2011-5098)
2011-04-18 00:00:00
openvas
openvas
Juniper Networks Junos OS Stack Exhaustion Denial of Service Vulnerability
2014-01-09 00:00:00
exploitdb
exploitdb
GNU glibc - 'regcomp()' Stack Exhaustion Denial of Service
2010-12-07 00:00:00
GNU libc/regcomp(3) - Multiple Vulnerabilities
2011-01-07 00:00:00
FreeBSD 9.1 - 'ftpd' Remote Denial of Service
2013-02-05 00:00:00
packetstorm
packetstorm
BSD libc/regcomp(3) Memory Management / Recursion
2011-11-04 00:00:00
OS X / Safari / Firefox REGEX Denial Of Service
2014-03-14 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: proftpd-1.3.4-0.8.rc2.fc15
2011-04-15 21:49:25
ubuntucve
ubuntucve
CVE-2011-3336
2020-02-12 00:00:00
hackerone
hackerone