CVE-2011-3336

regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.

Score

CVSS 3.1 7.5 High

Status

Modified - cret@cert.org

Published

2020-02-12

Last modified

2024-08-06

Weaknesses

CWE-400

Affected products

• Mac Os X (Apple)
• Macos (Apple)
• Freebsd (Freebsd)
• Openbsd (Openbsd)
• Php (Php)

References

• http://seclists.org/fulldisclosure/2014/Mar/166
• http://www.securityfocus.com/bid/50541
• https://cxsecurity.com/issue/WLB-2011110082
• https://www.securityfocus.com/archive/1/520390