CVE-2010-4756 Common Vulnerabilities and Exposures

Upstream information

CVE-2010-4756 at MITRE

Description

The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	4
Vector	AV:N/AC:L/Au:S/C:N/I:N/A:P
Access Vector	Network
Access Complexity	Low
Authentication	Single
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entries: 691365 [RESOLVED / FIXED], 968660 [NEW]

SUSE Security Advisories:

SUSE-SU-2013:1251-1, published Thu Jul 25 06:04:11 MDT 2013
SUSE-SU-2013:1287-1, published Thu Aug 1 07:04:11 MDT 2013

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Server 11 SP1-LTSS	`glibc >= 2.11.1-0.50.1` `glibc-32bit >= 2.11.1-0.50.1` `glibc-devel >= 2.11.1-0.50.1` `glibc-devel-32bit >= 2.11.1-0.50.1` `glibc-html >= 2.11.1-0.50.1` `glibc-i18ndata >= 2.11.1-0.50.1` `glibc-info >= 2.11.1-0.50.1` `glibc-locale >= 2.11.1-0.50.1` `glibc-locale-32bit >= 2.11.1-0.50.1` `glibc-profile >= 2.11.1-0.50.1` `glibc-profile-32bit >= 2.11.1-0.50.1` `nscd >= 2.11.1-0.50.1`	Patchnames: slessp1-glibc

SUSE Timeline for this CVE

CVE page created: Tue Jul 9 18:05:22 2013
CVE page last modified: Tue Jul 2 15:30:43 2024