Name: CVE-2018-20796: Uncontrolled Recursion
Creator: Rapid7
Published: 2019-02-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-20796, CWE-674, CVSS 7.5, EPSS 0.01492

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	No solution exists	May 15, 2025	Feb 26, 2019
Huawei Euleros 2_0_sp2	—	Upgrade glibc-headersUpgrade glibc-commonUpgrade nscdUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibcUpgrade glibc-devel	Jun 17, 2020	Feb 26, 2019
Huawei Euleros 2_0_sp3	—	Upgrade glibc-develUpgrade glibcUpgrade glibc-commonUpgrade glibc-headersUpgrade nscdUpgrade glibc-utilsUpgrade glibc-static	Apr 16, 2020	Feb 26, 2019
Huawei Euleros 2_0_sp5	—	Upgrade glibcUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-headersUpgrade nscd	Feb 24, 2020	Feb 26, 2019
Huawei Euleros 2_0_sp8	—	Upgrade glibc-langpack-isUpgrade glibc-langpack-yoUpgrade glibcUpgrade glibc-langpack-daUpgrade glibc-langpack-papUpgrade glibc-langpack-fyUpgrade glibc-langpack-magUpgrade glibc-langpack-plUpgrade glibc-langpack-siUpgrade glibc-langpack-viUpgrade glibc-develUpgrade glibc-langpack-mtUpgrade glibc-langpack-osUpgrade glibc-langpack-huUpgrade glibc-langpack-mhrUpgrade glibc-langpack-ptUpgrade glibc-langpack-mkUpgrade glibc-langpack-brUpgrade glibc-langpack-kuUpgrade glibc-langpack-loUpgrade glibc-langpack-paUpgrade glibc-langpack-dvUpgrade glibc-langpack-theUpgrade glibc-langpack-zhUpgrade nss_hesiodUpgrade glibc-langpack-amUpgrade glibc-langpack-biUpgrade glibc-langpack-cyUpgrade glibc-langpack-etUpgrade glibc-langpack-astUpgrade glibc-langpack-berUpgrade glibc-langpack-guUpgrade glibc-langpack-foUpgrade glibc-langpack-mnUpgrade glibc-langpack-caUpgrade glibc-langpack-doiUpgrade glibc-langpack-ffUpgrade glibc-langpack-arUpgrade glibc-langpack-kaUpgrade glibc-langpack-bhbUpgrade glibc-langpack-kkUpgrade glibc-langpack-brxUpgrade glibc-langpack-ksUpgrade glibc-langpack-rajUpgrade glibc-langpack-stUpgrade glibc-langpack-waeUpgrade glibc-langpack-urUpgrade glibc-staticUpgrade glibc-langpack-gezUpgrade glibc-langpack-zuUpgrade glibc-langpack-enUpgrade glibc-langpack-gdUpgrade glibc-langpack-iaUpgrade glibc-langpack-knUpgrade glibc-langpack-kokUpgrade glibc-langpack-fiUpgrade glibc-langpack-lnUpgrade glibc-langpack-crhUpgrade glibc-langpack-seUpgrade glibc-langpack-skUpgrade glibc-langpack-hsbUpgrade glibc-langpack-esUpgrade glibc-langpack-ttUpgrade glibc-langpack-veUpgrade glibc-langpack-asUpgrade nss_dbUpgrade glibc-langpack-yiUpgrade glibc-langpack-akUpgrade glibc-langpack-liUpgrade glibc-langpack-bsUpgrade glibc-langpack-itUpgrade glibc-langpack-heUpgrade glibc-langpack-svUpgrade glibc-langpack-szlUpgrade glibc-langpack-filUpgrade glibc-minimal-langpackUpgrade glibc-langpack-smUpgrade glibc-locale-sourceUpgrade glibc-langpack-sdUpgrade glibc-langpack-omUpgrade glibc-langpack-mrUpgrade glibc-langpack-mjwUpgrade glibc-langpack-tkUpgrade glibc-langpack-sahUpgrade glibc-langpack-kwUpgrade glibc-langpack-quzUpgrade glibc-langpack-rwUpgrade glibc-langpack-nbUpgrade glibc-langpack-sqUpgrade glibc-langpack-ltUpgrade glibc-langpack-tsUpgrade glibc-all-langpacksUpgrade glibc-langpack-koUpgrade glibc-langpack-aaUpgrade glibc-langpack-elUpgrade glibc-langpack-euUpgrade glibc-langpack-glUpgrade glibc-langpack-eoUpgrade glibc-langpack-jaUpgrade glibc-langpack-tnUpgrade glibc-langpack-lijUpgrade glibc-langpack-hiUpgrade glibc-langpack-mniUpgrade glibc-langpack-klUpgrade glibc-langpack-dzUpgrade glibc-langpack-deUpgrade glibc-langpack-mlUpgrade glibc-langpack-aycUpgrade glibc-langpack-lvUpgrade glibc-langpack-lzhUpgrade glibc-langpack-ceUpgrade glibc-langpack-taUpgrade glibc-langpack-yuwUpgrade glibc-langpack-msUpgrade glibc-langpack-nhnUpgrade glibc-langpack-srUpgrade nscdUpgrade glibc-utilsUpgrade glibc-langpack-uzUpgrade glibc-langpack-trUpgrade glibc-langpack-shsUpgrade glibc-langpack-scUpgrade glibc-langpack-satUpgrade glibc-langpack-ndsUpgrade glibc-langpack-csUpgrade glibc-langpack-woUpgrade glibc-langpack-gaUpgrade glibc-langpack-csbUpgrade glibc-langpack-afUpgrade glibc-langpack-beUpgrade glibc-langpack-agrUpgrade glibc-langpack-bnUpgrade glibc-langpack-chrUpgrade glibc-langpack-hneUpgrade glibc-langpack-orUpgrade glibc-langpack-kmUpgrade glibc-langpack-unmUpgrade libnslUpgrade glibc-langpack-ikUpgrade glibc-langpack-yueUpgrade glibc-langpack-ukUpgrade glibc-langpack-tlUpgrade glibc-langpack-tigUpgrade glibc-langpack-htUpgrade glibc-langpack-haUpgrade glibc-langpack-azUpgrade glibc-langpack-faUpgrade glibc-langpack-cvUpgrade glibc-langpack-bynUpgrade glibc-langpack-neUpgrade glibc-langpack-mgUpgrade glibc-langpack-boUpgrade glibc-langpack-waUpgrade glibc-langpack-ruUpgrade glibc-langpack-psUpgrade glibc-langpack-ocUpgrade glibc-langpack-nrUpgrade glibc-langpack-nnUpgrade glibc-langpack-gvUpgrade glibc-langpack-nsoUpgrade glibc-langpack-xhUpgrade glibc-langpack-teUpgrade glibc-langpack-niuUpgrade glibc-langpack-miqUpgrade glibc-langpack-kabUpgrade glibc-langpack-hrUpgrade glibc-langpack-hifUpgrade glibc-langpack-dsbUpgrade glibc-langpack-hakUpgrade glibc-langpack-anpUpgrade glibc-langpack-anUpgrade glibc-langpack-mfeUpgrade glibc-langpack-walUpgrade glibc-langpack-kyUpgrade glibc-langpack-idUpgrade glibc-langpack-furUpgrade glibc-langpack-cmnUpgrade glibc-langpack-bemUpgrade glibc-headersUpgrade glibc-langpack-ugUpgrade glibc-langpack-slUpgrade glibc-langpack-sidUpgrade glibc-langpack-sgsUpgrade glibc-langpack-nanUpgrade glibc-langpack-myUpgrade glibc-langpack-lbUpgrade glibc-langpack-miUpgrade glibc-langpack-hyUpgrade glibc-langpack-bgUpgrade glibc-langpack-nlUpgrade glibc-langpack-maiUpgrade glibc-langpack-iuUpgrade glibc-langpack-frUpgrade glibc-langpack-bhoUpgrade glibc-commonUpgrade glibc-langpack-tpiUpgrade glibc-langpack-toUpgrade glibc-langpack-tgUpgrade glibc-langpack-tcyUpgrade glibc-langpack-swUpgrade glibc-langpack-soUpgrade glibc-langpack-shnUpgrade glibc-langpack-saUpgrade glibc-langpack-roUpgrade glibc-langpack-igUpgrade glibc-langpack-tiUpgrade glibc-langpack-ssUpgrade glibc-langpack-thUpgrade glibc-langpack-lg	Feb 26, 2020	Feb 26, 2019

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence