VULNERABILITY INTELLIGENCE
CVE-2010-0296
CVSS score7.2 HIGH
EPSS probability0.57%
CISA KEVNot currently listed
Published2010-06-01
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.
Weakness classification
- CWE-20: Improper Input Validation