In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Feb 26, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibcUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-headersUpgrade nscdUpgrade glibc-commonUpgrade glibc-utils | Jun 17, 2020 | Feb 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibcUpgrade nscdUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-static | Apr 16, 2020 | Feb 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-develUpgrade glibc-staticUpgrade glibcUpgrade glibc-utilsUpgrade glibc-commonUpgrade nscdUpgrade glibc-headers | Feb 24, 2020 | Feb 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glibc-langpack-akUpgrade glibc-langpack-mfeUpgrade glibc-langpack-zhUpgrade glibc-langpack-maiUpgrade glibc-langpack-unmUpgrade glibc-langpack-bsUpgrade glibc-langpack-papUpgrade glibc-langpack-aycUpgrade glibc-langpack-berUpgrade glibc-langpack-iuUpgrade glibc-langpack-frUpgrade glibc-langpack-roUpgrade glibc-minimal-langpackUpgrade glibc-langpack-mrUpgrade glibc-langpack-skUpgrade glibc-langpack-csbUpgrade glibc-langpack-mgUpgrade glibc-all-langpacksUpgrade glibc-langpack-mnUpgrade glibc-langpack-nrUpgrade glibc-langpack-shnUpgrade glibc-langpack-svUpgrade glibc-langpack-tlUpgrade glibc-langpack-jaUpgrade glibc-langpack-dsbUpgrade glibc-langpack-heUpgrade glibc-langpack-klUpgrade glibc-langpack-kmUpgrade glibc-langpack-nbUpgrade glibc-langpack-igUpgrade glibc-langpack-theUpgrade glibc-langpack-ttUpgrade glibc-langpack-cmnUpgrade glibc-staticUpgrade glibc-langpack-asUpgrade glibc-langpack-cvUpgrade glibc-langpack-gezUpgrade glibc-langpack-koUpgrade glibc-langpack-miqUpgrade glibc-langpack-kyUpgrade glibc-langpack-hakUpgrade glibc-langpack-ruUpgrade glibc-langpack-afUpgrade glibc-langpack-anUpgrade glibc-langpack-bemUpgrade glibc-langpack-deUpgrade glibc-langpack-azUpgrade glibc-langpack-siUpgrade glibc-langpack-idUpgrade glibc-langpack-tigUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-langpack-ceUpgrade glibc-langpack-kkUpgrade glibc-langpack-miUpgrade glibc-langpack-lnUpgrade glibc-langpack-satUpgrade glibc-langpack-psUpgrade glibc-langpack-ukUpgrade glibc-langpack-waUpgrade glibc-langpack-gvUpgrade glibc-langpack-scUpgrade glibc-langpack-stUpgrade glibc-langpack-trUpgrade glibc-langpack-rwUpgrade glibc-langpack-mlUpgrade glibc-langpack-sidUpgrade glibc-langpack-seUpgrade glibc-langpack-swUpgrade glibc-langpack-szlUpgrade glibc-langpack-teUpgrade glibc-langpack-esUpgrade glibc-langpack-urUpgrade glibc-langpack-tpiUpgrade glibc-langpack-xhUpgrade glibc-langpack-isUpgrade glibc-langpack-itUpgrade glibc-langpack-kokUpgrade glibc-langpack-kuUpgrade glibc-langpack-loUpgrade glibc-langpack-lzhUpgrade glibc-langpack-niuUpgrade glibc-langpack-ocUpgrade glibc-langpack-shsUpgrade glibc-langpack-enUpgrade glibc-langpack-csUpgrade glibc-langpack-ffUpgrade glibc-langpack-anpUpgrade glibc-langpack-iaUpgrade glibc-langpack-zuUpgrade glibcUpgrade glibc-commonUpgrade glibc-langpack-agrUpgrade glibc-langpack-nnUpgrade glibc-langpack-tcyUpgrade glibc-langpack-saUpgrade glibc-langpack-nanUpgrade glibc-langpack-beUpgrade glibc-langpack-brxUpgrade glibc-langpack-nlUpgrade glibc-langpack-orUpgrade glibc-langpack-lgUpgrade glibc-langpack-lvUpgrade glibc-langpack-paUpgrade glibc-langpack-waeUpgrade glibc-langpack-veUpgrade glibc-langpack-euUpgrade glibc-langpack-lbUpgrade glibc-langpack-omUpgrade glibc-langpack-woUpgrade glibc-langpack-htUpgrade glibc-langpack-hrUpgrade glibc-langpack-toUpgrade glibc-langpack-kabUpgrade glibc-langpack-tiUpgrade glibc-langpack-myUpgrade glibc-langpack-sgsUpgrade glibc-langpack-yiUpgrade glibc-langpack-neUpgrade glibc-langpack-mtUpgrade glibc-langpack-mjwUpgrade glibc-langpack-lijUpgrade glibc-langpack-knUpgrade glibc-langpack-hyUpgrade glibc-langpack-glUpgrade glibc-langpack-chrUpgrade nss_hesiodUpgrade glibc-langpack-nsoUpgrade glibc-langpack-hneUpgrade glibc-langpack-hiUpgrade glibc-langpack-brUpgrade glibc-langpack-bnUpgrade glibc-langpack-ikUpgrade glibc-langpack-hifUpgrade glibc-langpack-bhoUpgrade glibc-langpack-astUpgrade glibc-langpack-yoUpgrade glibc-langpack-ugUpgrade glibc-langpack-sahUpgrade glibc-langpack-rajUpgrade glibc-langpack-nhnUpgrade glibc-langpack-amUpgrade glibc-langpack-liUpgrade glibc-langpack-mhrUpgrade glibc-langpack-eoUpgrade glibc-langpack-ltUpgrade glibc-langpack-elUpgrade glibc-langpack-haUpgrade glibc-langpack-guUpgrade glibc-langpack-bynUpgrade glibc-langpack-bhbUpgrade glibc-langpack-ptUpgrade glibc-langpack-dvUpgrade glibc-langpack-gaUpgrade glibc-langpack-plUpgrade glibc-langpack-doiUpgrade glibc-langpack-mkUpgrade glibc-langpack-kaUpgrade glibc-langpack-cyUpgrade nss_dbUpgrade glibc-langpack-etUpgrade glibc-langpack-tkUpgrade libnslUpgrade glibc-locale-sourceUpgrade glibc-langpack-uzUpgrade glibc-langpack-tsUpgrade glibc-langpack-thUpgrade glibc-langpack-osUpgrade glibc-langpack-mniUpgrade glibc-langpack-magUpgrade glibc-langpack-fyUpgrade glibc-langpack-daUpgrade glibc-langpack-dzUpgrade glibc-langpack-yuwUpgrade glibc-langpack-furUpgrade glibc-langpack-filUpgrade glibc-langpack-crhUpgrade glibc-langpack-biUpgrade glibc-langpack-arUpgrade glibc-langpack-huUpgrade glibc-langpack-boUpgrade glibc-langpack-viUpgrade glibc-langpack-ksUpgrade glibc-langpack-tgUpgrade glibc-langpack-ssUpgrade glibc-langpack-ndsUpgrade glibc-langpack-hsbUpgrade glibc-langpack-gdUpgrade glibc-langpack-faUpgrade glibc-langpack-bgUpgrade glibc-langpack-yueUpgrade glibc-langpack-sqUpgrade glibc-langpack-smUpgrade glibc-langpack-sdUpgrade glibc-langpack-quzUpgrade glibc-langpack-soUpgrade glibc-langpack-walUpgrade glibc-langpack-taUpgrade glibc-langpack-msUpgrade glibc-langpack-aaUpgrade glibc-headersUpgrade glibc-langpack-caUpgrade nscdUpgrade glibc-langpack-tnUpgrade glibc-langpack-foUpgrade glibc-langpack-fiUpgrade glibc-langpack-slUpgrade glibc-langpack-kwUpgrade glibc-langpack-sr | Feb 26, 2020 | Feb 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub