In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-gdUpgrade glibc-langpack-waUpgrade glibc-langpack-eoUpgrade glibc-langpack-caUpgrade glibc-langpack-itUpgrade glibc-langpack-beUpgrade glibc-langpack-srUpgrade glibc-langpack-yueUpgrade glibc-langpack-yiUpgrade glibc-langpack-waeUpgrade glibc-langpack-papUpgrade glibc-langpack-kwUpgrade glibc-langpack-nnUpgrade glibc-langpack-saUpgrade glibc-benchtestsUpgrade glibc-langpack-iaUpgrade glibc-langpack-mnUpgrade glibc-langpack-sidUpgrade glibc-langpack-gvUpgrade glibc-staticUpgrade glibc-langpack-faUpgrade glibc-langpack-zuUpgrade glibc-langpack-miUpgrade glibc-langpack-sgsUpgrade glibc-langpack-ocUpgrade glibc-langpack-foUpgrade glibc-langpack-ugUpgrade glibc-langpack-ikUpgrade glibc-langpack-thUpgrade glibc-langpack-lzhUpgrade glibc-langpack-teUpgrade glibc-langpack-fyUpgrade glibc-langpack-furUpgrade glibc-langpack-rajUpgrade glibc-langpack-cyUpgrade glibc-headersUpgrade glibc-langpack-magUpgrade glibc-langpack-soUpgrade glibc-langpack-sqUpgrade glibc-langpack-azUpgrade glibc-langpack-mkUpgrade glibc-langpack-shsUpgrade glibc-langpack-nhnUpgrade glibc-langpack-tgUpgrade glibc-langpack-walUpgrade glibc-langpack-theUpgrade nscdUpgrade glibc-langpack-anpUpgrade glibc-langpack-bhbUpgrade glibc-langpack-tkUpgrade glibc-langpack-orUpgrade glibc-langpack-tsUpgrade glibc-langpack-filUpgrade glibc-langpack-neUpgrade glibc-langpack-bnUpgrade glibc-langpack-chrUpgrade glibc-langpack-mhrUpgrade glibc-langpack-knUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-elUpgrade glibc-langpack-svUpgrade glibc-langpack-cmnUpgrade glibc-langpack-bsUpgrade glibc-langpack-kuUpgrade glibc-langpack-afUpgrade glibc-langpack-csbUpgrade glibc-langpack-mgUpgrade glibc-langpack-brUpgrade glibc-langpack-psUpgrade glibc-langpack-akUpgrade glibc-langpack-paUpgrade glibc-langpack-etUpgrade glibc-langpack-asUpgrade glibc-langpack-bemUpgrade glibc-langpack-satUpgrade glibc-langpack-bgUpgrade glibc-langpack-lijUpgrade glibc-langpack-brxUpgrade glibc-langpack-ksUpgrade glibc-langpack-lbUpgrade glibc-langpack-lgUpgrade glibc-langpack-nsoUpgrade glibc-langpack-ceUpgrade glibc-langpack-veUpgrade glibc-langpack-mtUpgrade glibc-locale-sourceUpgrade glibc-langpack-woUpgrade glibc-langpack-kaUpgrade glibc-langpack-aaUpgrade glibc-langpack-slUpgrade glibc-langpack-swUpgrade glibc-langpack-igUpgrade glibc-langpack-anUpgrade glibc-langpack-arUpgrade glibc-minimal-langpackUpgrade glibc-langpack-nbUpgrade glibc-langpack-euUpgrade glibc-langpack-kkUpgrade glibc-langpack-doiUpgrade glibc-langpack-cvUpgrade glibc-langpack-msUpgrade glibcUpgrade glibc-langpack-kmUpgrade glibc-langpack-koUpgrade glibc-langpack-myUpgrade glibc-langpack-ukUpgrade glibc-langpack-szlUpgrade glibc-langpack-stUpgrade glibc-langpack-hsbUpgrade glibc-langpack-esUpgrade glibc-langpack-dvUpgrade glibc-langpack-deUpgrade glibc-commonUpgrade glibc-langpack-bynUpgrade glibc-langpack-tlUpgrade glibc-debuginfoUpgrade glibc-langpack-ffUpgrade glibc-langpack-klUpgrade glibc-develUpgrade glibc-langpack-mlUpgrade glibc-langpack-iuUpgrade glibc-langpack-roUpgrade glibc-langpack-berUpgrade glibc-langpack-yoUpgrade glibc-langpack-jaUpgrade glibc-langpack-nlUpgrade glibc-langpack-glUpgrade glibc-langpack-ptUpgrade glibc-langpack-bhoUpgrade glibc-langpack-kyUpgrade glibc-langpack-loUpgrade glibc-langpack-aycUpgrade glibc-langpack-hneUpgrade glibc-langpack-nanUpgrade glibc-langpack-isUpgrade glibc-langpack-dzUpgrade glibc-langpack-uzUpgrade glibc-langpack-sdUpgrade glibc-langpack-haUpgrade glibc-langpack-tiUpgrade glibc-langpack-amUpgrade glibc-langpack-kokUpgrade glibc-langpack-hrUpgrade glibc-langpack-tcyUpgrade glibc-langpack-fiUpgrade glibc-langpack-xhUpgrade glibc-langpack-lnUpgrade glibc-langpack-hakUpgrade glibc-langpack-gaUpgrade glibc-all-langpacksUpgrade nss_dbUpgrade glibc-langpack-mrUpgrade glibc-langpack-siUpgrade glibc-langpack-viUpgrade glibc-langpack-urUpgrade glibc-langpack-tigUpgrade glibc-langpack-ssUpgrade glibc-langpack-skUpgrade glibc-langpack-rwUpgrade glibc-langpack-ndsUpgrade glibc-langpack-niuUpgrade glibc-langpack-mniUpgrade glibc-langpack-liUpgrade glibc-langpack-htUpgrade glibc-langpack-enUpgrade glibc-langpack-gezUpgrade glibc-langpack-osUpgrade glibc-langpack-idUpgrade glibc-langpack-heUpgrade glibc-langpack-frUpgrade glibc-langpack-crhUpgrade glibc-langpack-astUpgrade glibc-langpack-plUpgrade glibc-langpack-hiUpgrade glibc-langpack-tnUpgrade glibc-langpack-seUpgrade glibc-langpack-quzUpgrade glibc-langpack-maiUpgrade glibc-langpack-lvUpgrade glibc-langpack-boUpgrade glibc-langpack-omUpgrade glibc-langpack-daUpgrade glibc-langpack-guUpgrade glibc-utilsUpgrade glibc-langpack-hyUpgrade glibc-langpack-zhUpgrade glibc-langpack-unmUpgrade glibc-langpack-nrUpgrade glibc-langpack-ruUpgrade glibc-langpack-trUpgrade glibc-langpack-scUpgrade glibc-langpack-ltUpgrade glibc-langpack-taUpgrade nss_hesiodUpgrade glibc-langpack-huUpgrade libcryptUpgrade glibc-langpack-csUpgrade nss_nisUpgrade glibc-nss-develUpgrade libcrypt-nssUpgrade glibc-langpack-tt | Nov 10, 2022 | Feb 26, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-develUpgrade glibc-commonUpgrade nscdUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc | Apr 2, 2019 | Feb 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibcUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-develUpgrade nscdUpgrade glibc-headersUpgrade glibc-common | Apr 3, 2019 | Feb 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2019 |
| Suse | — | Upgrade glibc-locale-base-32bitUpgrade nscdUpgrade glibc-develUpgrade glibc-locale-baseUpgrade glibcUpgrade glibc-gconv-modules-extraUpgrade glibc-devel-32bitUpgrade glibc-utils-32bitUpgrade glibc-profileUpgrade glibc-locale-32bitUpgrade glibc-i18ndataUpgrade libnsl1Upgrade glibc-localeUpgrade libnsl1-32bitUpgrade glibc-extraUpgrade glibc-devel-staticUpgrade glibc-utilsUpgrade glibc-htmlUpgrade glibc-32bitUpgrade glibc-langUpgrade glibc-infoUpgrade glibc-profile-32bitUpgrade glibc-devel-static-32bit | Aug 9, 2024 | Feb 27, 2019 |
| Ubuntu | — | Upgrade libc6 | May 14, 2021 | Feb 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub