In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-gezUpgrade glibc-langpack-maiUpgrade glibc-langpack-heUpgrade glibc-langpack-enUpgrade glibc-langpack-seUpgrade glibc-langpack-fiUpgrade glibc-langpack-aycUpgrade glibc-langpack-trUpgrade glibc-langpack-unmUpgrade glibc-langpack-huUpgrade glibc-langpack-tiUpgrade glibc-langpack-plUpgrade glibc-langpack-hyUpgrade glibc-langpack-quzUpgrade glibc-langpack-hiUpgrade glibc-langpack-crhUpgrade glibc-langpack-bynUpgrade glibc-langpack-mrUpgrade glibc-langpack-uzUpgrade glibc-langpack-nanUpgrade glibc-langpack-sdUpgrade glibc-langpack-isUpgrade glibc-langpack-tnUpgrade glibc-langpack-guUpgrade glibc-langpack-htUpgrade glibc-langpack-gaUpgrade nss_hesiodUpgrade glibc-langpack-ffUpgrade glibc-langpack-boUpgrade glibc-debuginfoUpgrade glibc-langpack-daUpgrade glibc-langpack-tlUpgrade glibc-langpack-yoUpgrade glibc-langpack-bhoUpgrade glibc-langpack-dzUpgrade glibc-langpack-taUpgrade glibc-langpack-astUpgrade glibc-langpack-jaUpgrade glibc-langpack-glUpgrade glibc-langpack-loUpgrade glibc-langpack-iuUpgrade glibc-langpack-amUpgrade glibc-langpack-idUpgrade glibc-langpack-nrUpgrade glibc-langpack-ssUpgrade glibc-langpack-lnUpgrade glibc-langpack-ltUpgrade glibc-langpack-lvUpgrade glibc-develUpgrade glibc-langpack-niuUpgrade glibc-langpack-klUpgrade glibc-langpack-nlUpgrade glibc-langpack-omUpgrade glibc-langpack-viUpgrade glibc-langpack-osUpgrade glibc-langpack-mniUpgrade glibc-langpack-urUpgrade glibc-langpack-skUpgrade libcryptUpgrade glibc-langpack-esUpgrade glibc-langpack-xhUpgrade libcrypt-nssUpgrade glibc-langpack-siUpgrade glibc-langpack-liUpgrade nss_dbUpgrade glibc-langpack-dvUpgrade glibc-langpack-hneUpgrade glibc-langpack-haUpgrade glibc-langpack-deUpgrade glibc-langpack-rwUpgrade glibc-langpack-ndsUpgrade glibc-all-langpacksUpgrade glibc-langpack-szlUpgrade glibc-nss-develUpgrade glibc-langpack-tcyUpgrade glibc-langpack-tigUpgrade glibc-utilsUpgrade glibc-langpack-roUpgrade glibc-langpack-stUpgrade glibc-langpack-hakUpgrade glibc-langpack-frUpgrade glibc-langpack-ttUpgrade glibc-langpack-ukUpgrade glibc-langpack-hsbUpgrade glibc-langpack-ruUpgrade glibc-commonUpgrade glibc-langpack-scUpgrade glibc-langpack-csUpgrade glibc-langpack-ptUpgrade glibc-langpack-berUpgrade glibc-langpack-zhUpgrade glibc-langpack-kokUpgrade nss_nisUpgrade glibc-langpack-kyUpgrade glibc-langpack-mlUpgrade glibc-langpack-hrUpgrade glibcUpgrade glibc-langpack-foUpgrade glibc-langpack-kkUpgrade glibc-langpack-tsUpgrade glibc-langpack-sqUpgrade glibc-langpack-psUpgrade glibc-langpack-cyUpgrade glibc-headersUpgrade glibc-langpack-mgUpgrade glibc-langpack-etUpgrade glibc-langpack-ugUpgrade glibc-langpack-teUpgrade glibc-langpack-thUpgrade glibc-langpack-myUpgrade glibc-langpack-kwUpgrade glibc-langpack-csbUpgrade glibc-langpack-mkUpgrade glibc-langpack-fyUpgrade glibc-langpack-sgsUpgrade glibc-langpack-euUpgrade glibc-langpack-doiUpgrade glibc-langpack-srUpgrade glibc-langpack-kuUpgrade glibc-langpack-msUpgrade glibc-langpack-kmUpgrade glibc-langpack-satUpgrade glibc-langpack-azUpgrade glibc-langpack-nbUpgrade glibc-langpack-rajUpgrade glibc-langpack-cvUpgrade glibc-langpack-yueUpgrade glibc-langpack-koUpgrade glibc-langpack-aaUpgrade glibc-langpack-yiUpgrade glibc-langpack-papUpgrade glibc-langpack-walUpgrade glibc-benchtestsUpgrade glibc-langpack-anpUpgrade glibc-langpack-mhrUpgrade glibc-langpack-tkUpgrade glibc-langpack-slUpgrade glibc-langpack-svUpgrade glibc-langpack-cmnUpgrade glibc-langpack-arUpgrade glibc-langpack-waUpgrade glibc-langpack-bsUpgrade glibc-langpack-nhnUpgrade glibc-langpack-theUpgrade glibc-langpack-saUpgrade glibc-langpack-orUpgrade glibc-langpack-mnUpgrade glibc-langpack-eoUpgrade glibc-langpack-tgUpgrade glibc-langpack-afUpgrade glibc-langpack-sidUpgrade glibc-langpack-filUpgrade glibc-langpack-ocUpgrade glibc-langpack-nnUpgrade glibc-langpack-iaUpgrade glibc-langpack-soUpgrade glibc-langpack-waeUpgrade glibc-langpack-beUpgrade glibc-langpack-veUpgrade glibc-langpack-nsoUpgrade glibc-langpack-mtUpgrade glibc-langpack-lbUpgrade glibc-langpack-lgUpgrade glibc-langpack-ksUpgrade glibc-langpack-brxUpgrade glibc-langpack-ceUpgrade glibc-langpack-bgUpgrade glibc-langpack-bemUpgrade glibc-langpack-brUpgrade glibc-langpack-asUpgrade glibc-langpack-akUpgrade glibc-minimal-langpackUpgrade glibc-langpack-anUpgrade glibc-langpack-swUpgrade glibc-locale-sourceUpgrade glibc-langpack-woUpgrade glibc-langpack-lzhUpgrade glibc-langpack-miUpgrade glibc-langpack-furUpgrade glibc-langpack-elUpgrade glibc-langpack-zuUpgrade glibc-langpack-faUpgrade glibc-langpack-gvUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-chrUpgrade glibc-langpack-igUpgrade glibc-langpack-lijUpgrade glibc-langpack-neUpgrade glibc-langpack-itUpgrade glibc-langpack-kaUpgrade glibc-langpack-gdUpgrade glibc-langpack-knUpgrade glibc-langpack-shsUpgrade glibc-langpack-paUpgrade glibc-langpack-caUpgrade nscdUpgrade glibc-staticUpgrade glibc-langpack-bnUpgrade glibc-langpack-bhbUpgrade glibc-langpack-magUpgrade glibc-langpack-ik | Nov 10, 2022 | Feb 26, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-devel | Apr 2, 2019 | Feb 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade glibc-commonUpgrade nscdUpgrade glibc-headers | Apr 3, 2019 | Feb 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2019 |
| Suse | — | Upgrade nscdUpgrade glibc-localeUpgrade glibc-develUpgrade glibc-locale-baseUpgrade glibc-utils-32bitUpgrade glibc-devel-32bitUpgrade glibc-gconv-modules-extraUpgrade libnsl1Upgrade glibc-profileUpgrade glibc-locale-32bitUpgrade glibcUpgrade glibc-locale-base-32bitUpgrade glibc-i18ndataUpgrade glibc-infoUpgrade glibc-devel-static-32bitUpgrade glibc-profile-32bitUpgrade glibc-langUpgrade glibc-utilsUpgrade glibc-devel-staticUpgrade glibc-32bitUpgrade glibc-extraUpgrade libnsl1-32bitUpgrade glibc-html | Aug 9, 2024 | Feb 27, 2019 |
| Ubuntu | — | Upgrade libc6 | May 14, 2021 | Feb 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub