In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Feb 26, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-commonUpgrade glibc-headersUpgrade nscdUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-staticUpgrade glibc | Jun 17, 2020 | Feb 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-commonUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-headersUpgrade nscdUpgrade glibc | Apr 16, 2020 | Feb 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-commonUpgrade glibc-headersUpgrade nscdUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-develUpgrade glibc | Feb 24, 2020 | Feb 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glibc-langpack-unmUpgrade glibc-langpack-urUpgrade glibc-langpack-idUpgrade glibc-langpack-afUpgrade glibc-langpack-beUpgrade glibc-langpack-aycUpgrade glibc-langpack-orUpgrade glibc-langpack-teUpgrade glibc-langpack-papUpgrade glibc-minimal-langpackUpgrade glibc-langpack-bemUpgrade glibc-langpack-deUpgrade glibc-langpack-roUpgrade glibc-langpack-tigUpgrade glibc-langpack-skUpgrade glibc-langpack-iuUpgrade glibc-langpack-csbUpgrade glibc-langpack-azUpgrade glibc-langpack-zhUpgrade glibc-all-langpacksUpgrade glibc-langpack-berUpgrade glibc-langpack-bsUpgrade glibc-langpack-anUpgrade glibc-commonUpgrade glibc-langpack-agrUpgrade glibc-langpack-nnUpgrade glibc-langpack-nlUpgrade glibc-langpack-paUpgrade glibc-langpack-brxUpgrade glibc-langpack-rwUpgrade glibc-langpack-lgUpgrade glibc-langpack-loUpgrade glibc-langpack-nanUpgrade glibc-langpack-saUpgrade glibc-langpack-swUpgrade glibc-langpack-tpiUpgrade glibc-langpack-szlUpgrade glibc-langpack-xhUpgrade glibc-langpack-tcyUpgrade glibc-langpack-akUpgrade glibc-langpack-frUpgrade glibc-langpack-ttUpgrade glibc-langpack-hakUpgrade glibc-langpack-nbUpgrade glibc-langpack-ruUpgrade glibc-staticUpgrade glibc-langpack-asUpgrade glibc-langpack-cmnUpgrade glibc-langpack-cvUpgrade glibc-langpack-gezUpgrade glibc-langpack-kyUpgrade glibc-langpack-miqUpgrade glibc-langpack-theUpgrade glibc-langpack-zuUpgrade glibc-langpack-koUpgrade glibc-langpack-iaUpgrade glibc-langpack-anpUpgrade glibc-langpack-csUpgrade glibc-langpack-enUpgrade glibc-langpack-esUpgrade glibc-langpack-ffUpgrade glibc-langpack-isUpgrade glibcUpgrade glibc-langpack-itUpgrade glibc-langpack-kokUpgrade glibc-langpack-kuUpgrade glibc-langpack-lzhUpgrade glibc-langpack-niuUpgrade glibc-langpack-ocUpgrade glibc-langpack-siUpgrade glibc-langpack-shsUpgrade glibc-langpack-sidUpgrade glibc-langpack-gvUpgrade glibc-langpack-mlUpgrade glibc-langpack-jaUpgrade glibc-langpack-maiUpgrade glibc-langpack-mfeUpgrade glibc-langpack-mrUpgrade glibc-langpack-seUpgrade glibc-langpack-lnUpgrade glibc-langpack-klUpgrade glibc-langpack-mgUpgrade glibc-langpack-lvUpgrade glibc-langpack-heUpgrade glibc-langpack-igUpgrade glibc-langpack-mnUpgrade glibc-langpack-nrUpgrade glibc-langpack-svUpgrade glibc-langpack-tlUpgrade glibc-langpack-stUpgrade glibc-langpack-ukUpgrade glibc-langpack-waUpgrade glibc-langpack-scUpgrade glibc-utilsUpgrade glibc-langpack-trUpgrade glibc-develUpgrade glibc-langpack-kkUpgrade glibc-langpack-miUpgrade glibc-langpack-satUpgrade glibc-langpack-shnUpgrade glibc-langpack-psUpgrade glibc-langpack-kmUpgrade glibc-langpack-ceUpgrade glibc-langpack-dsbUpgrade glibc-langpack-brUpgrade glibc-langpack-bnUpgrade glibc-langpack-bhoUpgrade glibc-langpack-etUpgrade glibc-langpack-euUpgrade glibc-langpack-haUpgrade glibc-langpack-guUpgrade glibc-langpack-woUpgrade glibc-langpack-kaUpgrade glibc-langpack-mkUpgrade glibc-langpack-kwUpgrade glibc-langpack-kabUpgrade glibc-langpack-htUpgrade glibc-langpack-fiUpgrade glibc-langpack-dvUpgrade glibc-langpack-caUpgrade glibc-langpack-foUpgrade glibc-langpack-tnUpgrade glibc-langpack-soUpgrade glibc-langpack-slUpgrade nscdUpgrade glibc-langpack-toUpgrade glibc-langpack-gaUpgrade glibc-langpack-ptUpgrade glibc-langpack-veUpgrade glibc-langpack-nsoUpgrade glibc-langpack-neUpgrade glibc-langpack-mtUpgrade glibc-langpack-mjwUpgrade glibc-langpack-mhrUpgrade glibc-langpack-lijUpgrade nss_hesiodUpgrade glibc-langpack-amUpgrade glibc-langpack-knUpgrade glibc-langpack-hyUpgrade glibc-langpack-hneUpgrade glibc-langpack-glUpgrade glibc-langpack-waeUpgrade glibc-langpack-chrUpgrade glibc-langpack-yiUpgrade glibc-langpack-viUpgrade glibc-langpack-ksUpgrade glibc-langpack-tgUpgrade glibc-langpack-ssUpgrade glibc-langpack-ndsUpgrade glibc-langpack-hsbUpgrade glibc-langpack-gdUpgrade glibc-langpack-faUpgrade glibc-langpack-bgUpgrade glibc-langpack-yueUpgrade glibc-langpack-sqUpgrade glibc-langpack-smUpgrade glibc-langpack-sdUpgrade glibc-langpack-quzUpgrade glibc-langpack-bynUpgrade glibc-langpack-omUpgrade glibc-langpack-sgsUpgrade glibc-langpack-plUpgrade glibc-langpack-ltUpgrade glibc-langpack-yoUpgrade glibc-langpack-ugUpgrade glibc-langpack-sahUpgrade glibc-langpack-rajUpgrade glibc-langpack-nhnUpgrade glibc-langpack-liUpgrade glibc-langpack-astUpgrade glibc-langpack-ikUpgrade glibc-langpack-hifUpgrade glibc-langpack-hiUpgrade glibc-langpack-furUpgrade libnslUpgrade glibc-langpack-dzUpgrade glibc-langpack-daUpgrade glibc-langpack-crhUpgrade glibc-langpack-boUpgrade glibc-langpack-biUpgrade glibc-langpack-arUpgrade glibc-locale-sourceUpgrade glibc-langpack-yuwUpgrade glibc-langpack-uzUpgrade glibc-langpack-tsUpgrade glibc-langpack-thUpgrade glibc-langpack-osUpgrade glibc-langpack-mniUpgrade glibc-langpack-huUpgrade glibc-langpack-fyUpgrade glibc-langpack-filUpgrade glibc-langpack-magUpgrade glibc-langpack-bhbUpgrade nss_dbUpgrade glibc-headersUpgrade glibc-langpack-srUpgrade glibc-langpack-walUpgrade glibc-langpack-tiUpgrade glibc-langpack-taUpgrade glibc-langpack-msUpgrade glibc-langpack-doiUpgrade glibc-langpack-aaUpgrade glibc-langpack-tkUpgrade glibc-langpack-lbUpgrade glibc-langpack-cyUpgrade glibc-langpack-elUpgrade glibc-langpack-hrUpgrade glibc-langpack-eoUpgrade glibc-langpack-my | Feb 26, 2020 | Feb 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub