CVE-2009-5155

In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.

Affected products

Alt Linux, Suse, Ubuntu, Glibc

Gnu Glibc

< 2.28

Fix

Available

CVSS 3.0

7.5 HIGH

EPSS

3.9% (89th percentile)

Weakness

CWE-19

NVD status

Modified

Published

2019-02-26

No exploit for CVE-2009-5155 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.