Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU C Library regcomp实现栈消耗漏洞
Vulnerability Description
glibc(又名GNU C Library,libc6)是一种按照LGPL许可协议发布的开源免费的C语言编译程序。 GNU C Library(又名glibc或者libc6)至2.11.3版本,以及2.12.x至2.12.2版本中的regcomp实现中存在栈消耗漏洞。上下文攻击者可以借助包含相邻的重复操作符的正则表达式导致拒绝服务(资源耗尽)。
CVSS Information
N/A
Vulnerability Type
N/A