Every CVESearch/Get API key

CVE-2010-0296

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and...

7.2 HighFix available

CVE-2010-0296 is a high vulnerability (CVSS 7.2) in Gnu Glibc, published June 1, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. Fixed in glibc 2.11-1.

Severity
7.2 HighCVSS 2.0, NVD
Exploit chance
0.57%EPSS, 47th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.11-1glibc +51 more

Description

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Exploit likelihood

0.57%Down 1.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glibc
Debian:12
before 2.11-1
2.11-1
glibc
Debian:13
before 2.11-1
2.11-1
glibc
Debian:14
before 2.11-1
2.11-1
glibc
Debian:5.0
From an advisory covering 5 CVEs
before 2.7-18lenny4, plus listed versions
2.7-182.7-18lenny12.7-18lenny2
2.7-18lenny4
glibc
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:2.5-58.el5_6.2
0:2.5-58.el5_6.2
glibc-common
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:2.5-58.el5_6.2
0:2.5-58.el5_6.2
glibc-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:2.5-58.el5_6.2
0:2.5-58.el5_6.2
glibc-debuginfo-common
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:2.5-58.el5_6.2
0:2.5-58.el5_6.2
glibc-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:2.5-58.el5_6.2
0:2.5-58.el5_6.2
glibc-headers
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:2.5-58.el5_6.2
0:2.5-58.el5_6.2
Show 42 moreShow less
Affected packages
PackageAffectedFixed
glibc-utils
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:2.5-58.el5_6.2
0:2.5-58.el5_6.2
nscd
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:2.5-58.el5_6.2
0:2.5-58.el5_6.2
glibc
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-common
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo-common
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-headers
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-profile
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-utils
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
nptl-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
nscd
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-common
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo-common
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-headers
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-profile
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-utils
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
nptl-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
nscd
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-common
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo-common
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-headers
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-profile
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-utils
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
nptl-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
nscd
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-common
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-debuginfo-common
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-headers
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-profile
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
glibc-utils
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
nptl-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57
nscd
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-2.57
0:2.3.4-2.57

What each source reports

NVD Score used7.2

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Record
CVE-2010-0296
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Record
CVE-2010-0296
Updated
2026-11-02
EUVDEUVD-2010-0327No score

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Record
EUVD-2010-0327
Updated
2026-11-03
GitHub AdvisoriesGHSA-8hvc-pfj5-96x6No score

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and...

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Record
GHSA-8hvc-pfj5-96x6
Weakness
CWE-20
Updated
2026-11-02
OSVNo score

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Record
CVE-2010-0296
Updated
2026-11-02
OSVDEBIAN-CVE-2010-0296No score

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Record
DEBIAN-CVE-2010-0296
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 68 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open