Sign In

CVE-2010-4756

ADVISORY - debian

Summary

The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.

  • glibc (unimportant)
  • eglibc (unimportant) That's standard POSIX behaviour implemented by (e)glibc. Applications using glob need to impose limits for themselves
EPSS Score⁠: 0.00373 (0.583)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-399⁠

Resource Management Errors

Impacted images

Advisories

Debian

CREATED

UPDATED

ADVISORY IDCVE-2010-4756⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow
PackageTypeOS NameOS VersionAffected RangesFix Versions
debian/glibcdebdebian12>=2.36-9+deb12u10Not yet available
debian/glibcdebdebian13>=2.41-9Not yet available
debian/glibcdebdebian11>=2.31-13+deb11u11Not yet available
debian/glibcdebdebianunstable>=2.41-9Not yet available

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

UPDATED

ADVISORY IDCVE-2010-4756⁠
EXPLOITABILITY SCORE

8

EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CWE-399⁠

CVSS SCORE

4medium

Ubuntu

CREATED

UPDATED

ADVISORY IDCVE-2010-4756⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Red Hat

CREATED

UPDATED

ADVISORY IDCVE-2010-4756⁠
EXPLOITABILITY SCORE

10.0

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5low

Chainguard

CREATED

UPDATED

ADVISORY ID

CGA-5vfg-gqch-hcj5

EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY

intheWild

CREATED

UPDATED

ADVISORY IDCVE-2010-4756⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY