CLSA-2025-1757700075 glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

CLSA-2025-1757690876 glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

In the GNU C Library (aka glibc or libc6) through 2.29 proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.

...

The vulnerability of the `proceed_next_node` function in the GNU C library, which relates to the possibility of reading buffers outside the memory boundary, allows attackers to trigger a service failure.

The vulnerability in the proceednextnode function in posix/regexec.c of the GNU C library is related to the ability to read buffers outside the memory boundary, caused by comparing with a regular expression that does not depend on registers. Exploiting this vulnerability can allow an attacker to...

DEBIAN-CVE-2019-9169

In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match...