CVE-2010-4052: Medium severity GNU glibc vulnerability
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4052?
CVE-2010-4052 is classified as a high severity vulnerability that can lead to denial of service due to stack consumption.
How do I fix CVE-2010-4052?
To fix CVE-2010-4052, upgrade the GNU C Library (glibc) to version 2.12.3 or later.
Who is affected by CVE-2010-4052?
CVE-2010-4052 affects various versions of the GNU C Library (glibc) up to 2.12.2.
What type of vulnerability is CVE-2010-4052?
CVE-2010-4052 is a stack consumption vulnerability related to regular expressions that can cause resource exhaustion.
Can CVE-2010-4052 be exploited remotely?
Yes, CVE-2010-4052 can be exploited by attackers to cause denial of service through specially crafted regular expressions.