CVE-2011-3336 regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.
HighCVSS 7.5
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | >= 5.3.0, <= 5.3.10 | No fix listed |
| apple mac os x | >= 10.6.0, <= 10.7.2 | No fix listed |
| freebsd | = 8.2 | No fix listed |
| OpenBSD | = 5.0 | No fix listed |
| apple macos | = through 2011 | No fix listed |
References
- 20140314 MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service exploit mailing-list third-party-advisory
- 50541 exploit third-party-advisory vdb-entry
- cxsecurity.com exploit third-party-advisory
- 20111104 Multiple BSD libc/regcomp(3) Multiple Vulnerabilities exploit mailing-list third-party-advisory vdb-entry