Published: 02/03/2011 Updated: 01/09/2021

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 357

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc

Multiple vendors are affected by a memory exhaustion vulnerability in libc/glob(3) GLOB_BRACE|GLOB_LIMIT ...

A container image vex data distiller

VEXi - A (Wolfi-based) Container Image VEX Generator VEXi (short for VEX-Image) is a command line tool that generates OpenVEX documents for container images based on the Wolfi Linux (un)distribution To generate the VEX (Vulnerability Exploitability eXchange) data, VEXi looks in the registry for SBOMs (Software Bill of Materials) attached to the container image U

Gatecheck CI/CD Validation Tool

Gatecheck Gatecheck automates report validation in a CI/CD Pipeline by comparing security findings to a pre-determined thresholds It also provides report aggregation, artifact integrity, and deployment validation Gatecheck is stateless so self-hosting and provisioning servers is not required Upcoming Features The CLI is currently going through a much needed refactor Onc

CWE-399 http://securityreason.com/exploitalert/9223 http://cxib.net/stuff/glob-0day.c http://securityreason.com/achievement_securityalert/89 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756 https://bugzilla.redhat.com/show_bug.cgi?id=681681 https://nvd.nist.gov https://github.com/puerco/vexi https://packetstormsecurity.com/files/101052/Multiple-Vendors-libc-glob-3-GLOB_BRACE-GLOB_LIMIT-Memory-Exhaustion.html

CVE-2010-4756

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect