CVE-2010-4051
First published: Fri Oct 22 2010(Updated: )
Maksymilian Arciemowicz reported a deficiency in the way glibc regular expression engine processed certain patterns. A local attacker could use this flaw to cause a denial of service (crash due stack overflow). Note: The above described behavior is a limitation of glibc regular expression engine. Regular expression matching function is called recursively for certain types of patterns (where subexpression using quantifier is nested inside of another quantified expression), where long input can result in deep recursion and exhaustion of all stack memory (i.e. impact is limited to crash). Amount of stack memory available to glibc regular expression engine influences the size of input that must be provided to trigger the crash. Alternatively, expression can be modified to avoid quantification nesting, or program modified to limit size of input passed to regular expression engine. Conclusion: Due the above described behavior Red Hat Security Response Team would not classify this deficiency to be a security issue. References: [1] <a href="http://www.kb.cert.org/vuls/id/912279">http://www.kb.cert.org/vuls/id/912279</a> [2] <a href="http://www.securityfocus.com/archive/1/515589">http://www.securityfocus.com/archive/1/515589</a> [3] <a href="http://forums.cnet.com/7726-6132_102-5042238.html">http://forums.cnet.com/7726-6132_102-5042238.html</a> [4] <a href="http://secunia.com/advisories/42547/">http://secunia.com/advisories/42547/</a> [5] <a href="http://securityreason.com/securityalert/8003">http://securityreason.com/securityalert/8003</a>
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU glibc | =2.1.2 | |
| GNU glibc | =2.11 | |
| GNU glibc | =2.10.1 | |
| GNU glibc | =1.00 | |
| GNU glibc | =1.06 | |
| GNU glibc | =2.1.1 | |
| GNU glibc | =1.02 | |
| GNU glibc | =1.07 | |
| GNU glibc | =2.12.0 | |
| GNU glibc | =2.1.1.6 | |
| GNU glibc | =1.04 | |
| GNU glibc | =1.01 | |
| GNU glibc | =2.1 | |
| GNU glibc | =1.09.1 | |
| GNU glibc | =2.1.9 | |
| GNU glibc | =2.12.1 | |
| GNU glibc | =1.09 | |
| GNU glibc | =2.10 | |
| GNU glibc | =2.11.2 | |
| GNU glibc | =1.03 | |
| GNU glibc | =2.1.3.10 | |
| GNU glibc | =2.11.3 | |
| GNU glibc | =1.08 | |
| GNU glibc | =2.11.1 | |
| GNU glibc | =2.1.3 | |
| GNU glibc | =1.05 | |
| GNU glibc | =2.12.2 | |
| GNU glibc | =2.10.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securityreason.com/achievement_securityalert/93
- http://secunia.com/advisories/42547
- http://www.securityfocus.com/bid/45233
- http://cxib.net/stuff/proftpd.gnu.c
- http://www.kb.cert.org/vuls/id/912279
- http://securityreason.com/securityalert/8003
- https://bugzilla.redhat.com/show_bug.cgi?id=645859
- http://seclists.org/fulldisclosure/2011/Jan/78
- http://securitytracker.com/id?1024832
- http://www.exploit-db.com/exploits/15935
- http://www.securityfocus.com/archive/1/515589/100/0/threaded
- https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E
- http://www.securityfocus.com/archive/1/515589
- http://forums.cnet.com/7726-6132_102-5042238.html
- http://secunia.com/advisories/42547/
- https://access.redhat.com/security/cve/CVE-2010-4051
- https://access.redhat.com/security/cve/CVE-2010-4052
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=645859#c6
- https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
- collector/nvd-historical
- collector/redhat-bugzilla
- alias/CVE-2010-4051
- collector/nvd-index
- collector/nvd-api
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/tags
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- vendor/gnu
- canonical/gnu glibc
- version/gnu glibc/2.1.2
- version/gnu glibc/2.11
- version/gnu glibc/2.10.1
- version/gnu glibc/1.00
- version/gnu glibc/1.06
- version/gnu glibc/2.1.1
- version/gnu glibc/1.02
- version/gnu glibc/1.07
- version/gnu glibc/2.12.0
- version/gnu glibc/2.1.1.6
- version/gnu glibc/1.04
- version/gnu glibc/1.01
- version/gnu glibc/2.1
- version/gnu glibc/1.09.1
- version/gnu glibc/2.1.9
- version/gnu glibc/2.12.1
- version/gnu glibc/1.09
- version/gnu glibc/2.10
- version/gnu glibc/2.11.2
- version/gnu glibc/1.03
- version/gnu glibc/2.1.3.10
- version/gnu glibc/2.11.3
- version/gnu glibc/1.08
- version/gnu glibc/2.11.1
- version/gnu glibc/2.1.3
- version/gnu glibc/1.05
- version/gnu glibc/2.12.2
- version/gnu glibc/2.10.2