CVE-2010-4052

Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.

• CWE-399

• http://cxib.net/stuff/proftpd.gnu.cPatch
• http://seclists.org/fulldisclosure/2011/Jan/78Exploit
• http://secunia.com/advisories/42547Vendor Advisory
• http://securityreason.com/achievement_securityalert/93Exploit
• http://securityreason.com/securityalert/8003Exploit
• http://securitytracker.com/id?1024832
• http://www.exploit-db.com/exploits/15935
• http://www.kb.cert.org/vuls/id/912279US Government Resource
• http://www.securityfocus.com/archive/1/515589/100/0/threaded
• http://www.securityfocus.com/bid/45233Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=645859Exploit
• http://cxib.net/stuff/proftpd.gnu.cPatch
• http://seclists.org/fulldisclosure/2011/Jan/78Exploit
• http://secunia.com/advisories/42547Vendor Advisory
• http://securityreason.com/achievement_securityalert/93Exploit
• http://securityreason.com/securityalert/8003Exploit
• http://securitytracker.com/id?1024832
• http://www.exploit-db.com/exploits/15935
• http://www.kb.cert.org/vuls/id/912279US Government Resource
• http://www.securityfocus.com/archive/1/515589/100/0/threaded
• http://www.securityfocus.com/bid/45233Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=645859Exploit

Published

Jan 13, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4046Opera before 10.63 does not properly verify the origin of vi…
• CVE-2010-4047Opera before 10.63 does not properly select the security con…
• CVE-2010-4048Opera before 10.63 allows user-assisted remote web servers t…
• CVE-2010-4049Opera before 10.63 allows remote attackers to cause a denial…
• CVE-2010-4050Opera before 10.63 allows remote attackers to cause a denial…
• CVE-2010-4051The regcomp implementation in the GNU C Library (aka glibc o…
• CVE-2010-4053Stack-based buffer overflow in an unspecified logging functi…
• CVE-2010-4054The gs_type2_interpret function in Ghostscript allows remote…
• CVE-2010-4055Stack consumption vulnerability in solid.exe in IBM solidDB …
• CVE-2010-4056solid.exe in IBM solidDB 6.5.0.3 and earlier does not proper…
• CVE-2010-4057solid.exe in IBM solidDB 6.5.0.3 and earlier does not proper…
• CVE-2010-4068Unspecified vulnerability in the Extension Manager in TYPO3 …