DEBIAN-CVE-2010-0296

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2010-0296
Downstream
DSA-2058-1
Published: 01 Jun 2010, 20:30
Last modified:28 Apr 2026, 20:11

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

01 Jun 2010, 20:30
Published
Vulnerability first disclosed
28 Apr 2026, 20:11
Last Modified
Vulnerability information updated

Description

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Affected Systems

  • debian•glibc

    < 2.11-1 | < 2.11-1 | < 2.11-1 | < 2.11-1

References (1)