REDHAT-BUG-645859
First published: Fri Oct 22 2010(Updated: )
Maksymilian Arciemowicz reported a deficiency in the way glibc regular expression engine processed certain patterns. A local attacker could use this flaw to cause a denial of service (crash due stack overflow). Note: The above described behavior is a limitation of glibc regular expression engine. Regular expression matching function is called recursively for certain types of patterns (where subexpression using quantifier is nested inside of another quantified expression), where long input can result in deep recursion and exhaustion of all stack memory (i.e. impact is limited to crash). Amount of stack memory available to glibc regular expression engine influences the size of input that must be provided to trigger the crash. Alternatively, expression can be modified to avoid quantification nesting, or program modified to limit size of input passed to regular expression engine. Conclusion: Due the above described behavior Red Hat Security Response Team would not classify this deficiency to be a security issue. References: [1] <a href="http://www.kb.cert.org/vuls/id/912279">http://www.kb.cert.org/vuls/id/912279</a> [2] <a href="http://www.securityfocus.com/archive/1/515589">http://www.securityfocus.com/archive/1/515589</a> [3] <a href="http://forums.cnet.com/7726-6132_102-5042238.html">http://forums.cnet.com/7726-6132_102-5042238.html</a> [4] <a href="http://secunia.com/advisories/42547/">http://secunia.com/advisories/42547/</a> [5] <a href="http://securityreason.com/securityalert/8003">http://securityreason.com/securityalert/8003</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU C Library (glibc) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.kb.cert.org/vuls/id/912279
- http://www.securityfocus.com/archive/1/515589
- http://forums.cnet.com/7726-6132_102-5042238.html
- http://secunia.com/advisories/42547/
- http://securityreason.com/securityalert/8003
- https://access.redhat.com/security/cve/CVE-2010-4051
- https://access.redhat.com/security/cve/CVE-2010-4052
- http://seclists.org/fulldisclosure/2011/Jan/78
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=645859#c6
- https://bugzilla.redhat.com/show_bug.cgi?id=645859
Frequently Asked Questions
What is the severity of REDHAT-BUG-645859?
The severity of REDHAT-BUG-645859 is considered high due to the potential for a denial of service caused by a stack overflow.
How do I fix REDHAT-BUG-645859?
To fix REDHAT-BUG-645859, ensure that your version of glibc is updated to the latest available release that addresses this vulnerability.
Who is affected by REDHAT-BUG-645859?
Users of the GNU C Library (glibc) are primarily affected by the REDHAT-BUG-645859 vulnerability.
What attack vector is associated with REDHAT-BUG-645859?
The attack vector associated with REDHAT-BUG-645859 involves local attackers exploiting the regular expression engine to trigger a denial of service.
What are the potential consequences of REDHAT-BUG-645859?
The potential consequences of REDHAT-BUG-645859 include application crashes and disruptions in services due to stack overflow errors.
- collector/redhat-bugzilla
- alias/CVE-2010-4051
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gnu
- canonical/gnu c library (glibc)