CVE-2013-0242
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
glibc（又名GNU C Library，libc6）是一种按照LGPL许可协议发布的开源免费的C语言编译程序。 glibc 2.17及更早版本中的正则表达式匹配器中的extend_buffers函数中存在缓冲区溢出漏洞。基于上下文的攻击者可通过特制的多字节字符利用该漏洞导致拒绝服务（内存耗尽或崩溃）。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2013-0242
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
GNU C glibc ‘extend_buffers()’ 正则表达式处理拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
glibc（又名GNU C Library，libc6）是一种按照LGPL许可协议发布的开源免费的C语言编译程序。 glibc 2.17及更早版本中的正则表达式匹配器中的extend_buffers函数中存在缓冲区溢出漏洞。基于上下文的攻击者可通过特制的多字节字符利用该漏洞导致拒绝服务（内存耗尽或崩溃）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2013-0242
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-0242
请登录查看更多情报信息。
Vendor Advisories for CVE-2013-0242 (11)
-
🔗 http://www.vmware.com/security/advisories/VMSA-2014-0008.html x_refsource_CONFIRM
-
-
-
-
-
-
-
-
-
-
Mailing List Discussions for CVE-2013-0242 (1)
Other References for CVE-2013-0242 (2)
-
🔗 http://sourceware.org/bugzilla/show_bug.cgi?id=15078 x_refsource_MISC
-
Same Patch Batch · n/a · 2013-02-08 · 21 CVEs total
| CVE-2013-1619 | GnuTLS TLS实现加密问题漏洞 | |
| CVE-2013-1465 | CubeCart ‘shipping’参数PHP对象注入漏洞 | |
| CVE-2013-0263 | Rack 远程任意代码执行漏洞 | |
| CVE-2013-0262 | Rack 路径遍历漏洞 | |
| CVE-2013-0189 | Squid 缓冲区错误漏洞 | |
| CVE-2013-0170 | Red Hat libvirt 资源管理错误漏洞 | |
| CVE-2013-1624 | Bouncy Castle 加密问题漏洞 | |
| CVE-2013-1623 | wolfSSL CyaSSL TLS/DTLS实现加密问题漏洞 | |
| CVE-2013-1621 | PolarSSL 数组索引错误漏洞 | |
| CVE-2013-1620 | Mozilla Network Security Services TLS实现加密问题漏洞 | |
| CVE-2012-4700 | IntegraXor ActiveX Control 缓冲区溢出漏洞 | |
| CVE-2013-1618 | Opera Web Browser TLS 加密问题漏洞 | |
| CVE-2013-0169 | 多个TLS/DTLS实现加密问题漏洞 | |
| CVE-2013-0166 | OpenSSL 加密问题漏洞 | |
| CVE-2012-2686 | OpenSSL 加密问题漏洞 | |
| CVE-2013-1639 | Opera 跨站请求伪造漏洞 | |
| CVE-2013-1638 | Opera 代码注入漏洞 | |
| CVE-2013-1637 | Opera 代码注入漏洞 | |
| CVE-2013-0634 | Adobe Flash Player 缓冲区溢出漏洞 | |
| CVE-2013-0633 | Adobe Flash Player 缓冲区溢出漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2013-0242
No comments yet