CVE-2010-4756

The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.

Affected products

Debian, Suse, Glibc

Gnu Glibc

All versions

CVSS 2.0

4.0 MEDIUM

EPSS

2.6% (84th percentile)

Weakness

CWE-399

NVD status

Modified

Published

2011-03-02