PT-2020-7118 · Libc · Libc

Maksymilian Arciemowicz · Published 2020-02-12 · Updated 2020-02-18 · CVE-2011-3336

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions libc (affected versions not specified)

Description The issue is related to the regcomp function in the BSD implementation of libc, which is vulnerable to denial of service due to stack exhaustion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2011-3336

Affected Products

Libc

References · 8

• 🔥 https://exploit-db.com/exploits/36288 · Exploit
• 🔥 http://securityfocus.com/bid/50541 · Exploit
• 🔥 https://securityfocus.com/archive/1/520390 · Exploit
• 🔥 https://cxsecurity.com/issue/WLB-2011110082 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Mar/166 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-3336 · Security Note
• https://t.me/cibsecurity/9800 · Telegram Post
• https://t.me/cvenotify/951 · Telegram Post