CVE-2010-4052
glibc 2.11.3/2.12.x-2.12.2 DoS via Adjacent Repetition in Regex
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-4052. PoCs published by Maksymilian Arciemowicz.
AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in GNU glibc's regex handling (CVE-2010-4052) by creating a malicious .ftpaccess file in ProFTPD. It leverages stack exhaustion via crafted regular expressions to cause CPU or memory exhaustion, leading to service disruption.
Description
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.
Exploits (2)
This exploit targets a denial-of-service vulnerability in GNU glibc's regex handling (CVE-2010-4052) by creating a malicious .ftpaccess file in ProFTPD. It leverages stack exhaustion via crafted regular expressions to cause CPU or memory exhaustion, leading to service disruption.
The exploit demonstrates a denial-of-service (DoS) vulnerability in GNU libc's regcomp function (CVE-2010-4051) by triggering a stack exhaustion or segmentation fault via malformed regular expressions with excessive repetition operators. The PoC code provides multiple examples of patterns that cause crashes in applications like grep, pgrep, and proftpd.