GNU glibc 'regcomp()' Stack Exhaustion Denial Of Service Vulnerability

Bugtraq ID:	45233
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-4051 CVE-2010-4052
Remote:	No
Local:	Yes
Published:	Dec 07 2010 12:00AM
Updated:	Apr 13 2015 10:12PM
Credit:	Maksymilian Arciemowicz
Vulnerable:	Mozilla Firefox 27.0.1 Kaspersky Kaspersky 14.0.0.4651 Juniper junose 11.3.3 Juniper junose 10.3 Juniper JUNOS Space 11.1 Juniper JUNOS 13.2R1 Juniper JUNOS 13.1R3 Juniper JUNOS 13.1R2 Juniper JUNOS 13.1R1 Juniper JUNOS 13.1 Juniper JUNOS 12.3R3 Juniper JUNOS 12.3R2 Juniper JUNOS 12.3 Juniper JUNOS 12.2R4 Juniper JUNOS 12.2R3 Juniper JUNOS 12.2 Juniper JUNOS 12.1X45-D10 Juniper JUNOS 12.1X45 Juniper JUNOS 12.1X44-D20 Juniper JUNOS 12.1X44-D15 Juniper JUNOS 12.1X44 Juniper JUNOS 12.1R7-S1 Juniper JUNOS 12.1R7 Juniper JUNOS 12.1R6 Juniper JUNOS 12.1R5-S3 Juniper JUNOS 12.1R3 Juniper JUNOS 12.1 Juniper JUNOS 11.4X27.44 Juniper JUNOS 11.4X27.43 (BBE) Juniper JUNOS 11.4X27 Juniper JUNOS 11.4R9 Juniper JUNOS 11.4R8 Juniper JUNOS 11.4R7-S2 Juniper JUNOS 11.4R7-S1 Juniper JUNOS 11.4R7 Juniper JUNOS 11.4R6.6 Juniper JUNOS 11.4R6-S2 Juniper JUNOS 11.4R5.5 Juniper JUNOS 11.4R5-S2 Juniper JUNOS 11.4R3.7 Juniper JUNOS 11.4R1 Juniper JUNOS 11.4 Juniper JUNOS 11.2R2 Juniper JUNOS 11.2R1 Juniper JUNOS 11.2 Juniper JUNOS 11.1R5 Juniper JUNOS 11.1R4 Juniper JUNOS 11.1 Juniper JUNOS 10.4S14 Juniper JUNOS 10.4R7 Juniper JUNOS 10.4R6 Juniper JUNOS 10.4R14 Juniper JUNOS 10.4R13 Juniper JUNOS 10.4R11 Juniper JUNOS 10.4 Juniper JUNOS 10.3 Juniper JUNOS 10.2R3 Juniper JUNOS 10.2R2 Juniper JUNOS 10.2 Juniper JUNOS 10.1 Juniper JUNOS 10.0S28 Juniper JUNOS 10.0S18 GNU glibc 0 Apple Safari 7.0.2
Not Vulnerable:	Juniper JUNOS 13.3R1 Juniper JUNOS 13.2R2 Juniper Junos 13.1R3-S1 Juniper JUNOS 12.3R4 Juniper JUNOS 12.2R6 Juniper Junos 12.1X46-D10 Juniper JUNOS 12.1X45-D15 Juniper JUNOS 12.1X44-D25 Juniper JUNOS 12.1R8 Juniper JUNOS 11.4R9-S1 Juniper Junos 11.4R10 Juniper JUNOS 10.4S15 Juniper JUNOS 10.4R16

GNU glibc 'regcomp()' Stack Exhaustion Denial Of Service Vulnerability

GNU glibc is prone to a denial-of-service vulnerability due to stack exhaustion.

Successful exploits will allow attackers to make the affected computer unresponsive, denying service to legitimate users.

This issue affects unknown versions of the glibc library. This BID will be updated when more details become available.

GNU glibc 'regcomp()' Stack Exhaustion Denial Of Service Vulnerability

The following example is available:

grep -E ".*{10,}{10,}{10,}{10,}{10,}"

The following exploit code is available:

• /data/vulnerabilities/exploits/45233.c

GNU glibc 'regcomp()' Stack Exhaustion Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GNU glibc 'regcomp()' Stack Exhaustion Denial Of Service Vulnerability

References:

• GNU C Library Homepage (GNU)
  
• MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service (CXSecurity)
  
• 2014-01 Security Bulletin: Junos: GNU libc 'regcomp()' Stack Exhaustion Denial O (Juniper Networks)
  
• VU#912279 GNU libc regcomp() stack exhaustion denial of service (US-CERT)