Upstream information

CVE-2010-4756 at MITRE

Description

The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having important severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 4
Vector AV:N/AC:L/Au:S/C:N/I:N/A:P
Access Vector Network
Access Complexity Low
Authentication Single
Confidentiality Impact None
Integrity Impact None
Availability Impact Partial
SUSE Bugzilla entry: 691365 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1-LTSS
  • glibc >= 2.11.1-0.50.1
  • glibc-32bit >= 2.11.1-0.50.1
  • glibc-devel >= 2.11.1-0.50.1
  • glibc-devel-32bit >= 2.11.1-0.50.1
  • glibc-html >= 2.11.1-0.50.1
  • glibc-i18ndata >= 2.11.1-0.50.1
  • glibc-info >= 2.11.1-0.50.1
  • glibc-locale >= 2.11.1-0.50.1
  • glibc-locale-32bit >= 2.11.1-0.50.1
  • glibc-profile >= 2.11.1-0.50.1
  • glibc-profile-32bit >= 2.11.1-0.50.1
  • nscd >= 2.11.1-0.50.1
Patchnames:
slessp1-glibc
SUSE Linux Enterprise Server for SAP Applications 11 SP1-LTSS
  • glibc >= 2.11.1-0.50.1
  • glibc-32bit >= 2.11.1-0.50.1
  • glibc-devel >= 2.11.1-0.50.1
  • glibc-devel-32bit >= 2.11.1-0.50.1
  • glibc-html >= 2.11.1-0.50.1
  • glibc-i18ndata >= 2.11.1-0.50.1
  • glibc-info >= 2.11.1-0.50.1
  • glibc-locale >= 2.11.1-0.50.1
  • glibc-locale-32bit >= 2.11.1-0.50.1
  • glibc-profile >= 2.11.1-0.50.1
  • glibc-profile-32bit >= 2.11.1-0.50.1
  • nscd >= 2.11.1-0.50.1
Patchnames:
slessp1-glibc
SUSE Linux Enterprise Server 11 SP1 LTSS
  • glibc >= 2.11.1-0.50.1
  • glibc-devel >= 2.11.1-0.50.1
  • glibc-html >= 2.11.1-0.50.1
  • glibc-i18ndata >= 2.11.1-0.50.1
  • glibc-info >= 2.11.1-0.50.1
  • glibc-locale >= 2.11.1-0.50.1
  • glibc-profile >= 2.11.1-0.50.1
  • nscd >= 2.11.1-0.50.1
Builds
SAT Patch Nr: 8082
SUSE Linux Enterprise Server 11 SP1 LTSS
  • glibc >= 2.11.1-0.50.1
  • glibc-32bit >= 2.11.1-0.50.1
  • glibc-devel >= 2.11.1-0.50.1
  • glibc-devel-32bit >= 2.11.1-0.50.1
  • glibc-html >= 2.11.1-0.50.1
  • glibc-i18ndata >= 2.11.1-0.50.1
  • glibc-info >= 2.11.1-0.50.1
  • glibc-locale >= 2.11.1-0.50.1
  • glibc-locale-32bit >= 2.11.1-0.50.1
  • glibc-profile >= 2.11.1-0.50.1
  • glibc-profile-32bit >= 2.11.1-0.50.1
  • nscd >= 2.11.1-0.50.1
Builds
SAT Patch Nr: 8082
SUSE Linux Enterprise Server 10 SP3 LTSS for x86
  • glibc >= 2.4-31.77.102.1
  • glibc-devel >= 2.4-31.77.102.1
  • glibc-html >= 2.4-31.77.102.1
  • glibc-i18ndata >= 2.4-31.77.102.1
  • glibc-info >= 2.4-31.77.102.1
  • glibc-locale >= 2.4-31.77.102.1
  • glibc-profile >= 2.4-31.77.102.1
  • nscd >= 2.4-31.77.102.1
Builds
ZYPP Patch Nr: 8645
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit
  • glibc >= 2.4-31.77.102.1
  • glibc-32bit >= 2.4-31.77.102.1
  • glibc-devel >= 2.4-31.77.102.1
  • glibc-devel-32bit >= 2.4-31.77.102.1
  • glibc-html >= 2.4-31.77.102.1
  • glibc-i18ndata >= 2.4-31.77.102.1
  • glibc-info >= 2.4-31.77.102.1
  • glibc-locale >= 2.4-31.77.102.1
  • glibc-locale-32bit >= 2.4-31.77.102.1
  • glibc-profile >= 2.4-31.77.102.1
  • glibc-profile-32bit >= 2.4-31.77.102.1
  • nscd >= 2.4-31.77.102.1
Builds
ZYPP Patch Nr: 8645