CVE-2010-4051
glibc through 2.11.3 and 2.12.x through 2.12.2 - Denial of Service via RE_DUP_MAX Overflow in regcomp
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4051. PoCs published by Maksymilian Arciemowicz.
AI-analyzed exploit summary The exploit demonstrates a denial-of-service (DoS) vulnerability in GNU libc's regcomp function (CVE-2010-4051) by triggering a stack exhaustion or segmentation fault via malformed regular expressions with excessive repetition operators. The PoC code provides multiple examples of patterns that cause crashes in applications like grep, pgrep, and proftpd.
Description
The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded repetitions that bypass the intended RE_DUP_MAX limitation, as demonstrated by a {10,}{10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD, related to a "RE_DUP_MAX overflow."
Exploits (1)
The exploit demonstrates a denial-of-service (DoS) vulnerability in GNU libc's regcomp function (CVE-2010-4051) by triggering a stack exhaustion or segmentation fault via malformed regular expressions with excessive repetition operators. The PoC code provides multiple examples of patterns that cause crashes in applications like grep, pgrep, and proftpd.