Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-20796

Опубликовано: 26 фев. 2019
Источник: debian
EPSS Низкий

Описание

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
glibcunfixedpackage
eglibcremovedpackage

Примечания

  • https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141

  • https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html

  • No treated as vulnerability: https://sourceware.org/glibc/wiki/Security%20Exceptions

EPSS

Процентиль: 83%
0.02051
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 6 лет назад

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

CVSS3: 5.3
redhat
больше 6 лет назад

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

CVSS3: 7.5
nvd
больше 6 лет назад

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

CVSS3: 7.5
msrc
около 5 лет назад

Описание отсутствует

CVSS3: 7.5
github
больше 3 лет назад

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

EPSS

Процентиль: 83%
0.02051
Низкий