CVE-2010-0296: GNU Glibc

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Affected products

• GNU Glibc: up to and including 2.11.1; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; …

Published 2010-06-01. Last modified 2026-06-16.