high7.5Public exploit code
CVE-2011-3336
regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Libc - 'regcomp()' Stack Exhaustion Denial of Service2011-11-04 · dos · multiple · Verified
Impact
regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | from 5.3.0 through 5.3.10 |
| Apple | Mac Os X | from 10.6.0 through 10.7.2 |
| Freebsd | Freebsd | Version 8.2 |
| Openbsd | Openbsd | Version 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2014/Mar/166
- http://www.securityfocus.com/bid/50541
- https://cxsecurity.com/issue/WLB-2011110082
- https://www.securityfocus.com/archive/1/520390
- http://seclists.org/fulldisclosure/2014/Mar/166
- http://www.securityfocus.com/bid/50541
- https://cxsecurity.com/issue/WLB-2011110082
- https://www.securityfocus.com/archive/1/520390