CyberSec.Space Logo
Back to CVE Browser

CVE-2019-9169

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1640%
EPSS Percentile40.50th
PublishedFeb 26, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.

Affected Platforms (CPE)

📦
Gnu

Glibc

<= 2.29
📦
Netapp

Cloud Backup

All versions
📦
Netapp

Ontap Select Deploy Administration Utility

All versions
📦
Netapp

Steelstore Cloud Integrated Storage

All versions
📦
Mcafee

Web Gateway

>= 7.7.2.0 and < 7.7.2.21
📦
Mcafee

Web Gateway

>= 7.8.2.0 and < 7.8.2.8
📦
Mcafee

Web Gateway

>= 8.0.0 and < 8.1.1
💻
Canonical

Ubuntu Linux

= 16.04
💻
Canonical

Ubuntu Linux

= 18.04
💻
Canonical

Ubuntu Linux

= 19.10

References & Advisories

🔗 http://www.securityfocus.com/bid/107160
🔗 https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34140
🔗 https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34142
🔗 https://kc.mcafee.com/corporate/index?page=content&id=SB10278
🔗 https://security.gentoo.org/glsa/202006-04
🔗 https://security.netapp.com/advisory/ntap-20190315-0002/
🔗 https://sourceware.org/bugzilla/show_bug.cgi?id=24114
🔗 https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=583dd860d5b833037175247230a328f0050dbfe9

Related Vulnerabilities

CVE-2015-023510.0

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows con...

CVE-2021-277109.8

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu...

CVE-2019-142719.8

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility...

CVE-2021-277089.8

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu...