Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2009-5155

Good to know:

icon
icon

Date: February 25, 2019

In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.

Language: C

Severity Score

Related Resources (17)

https://nvd.nist.gov/vuln/detail/CVE-2009-5155
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34238
http://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=5513b40999149090987a0341c018d05d3eea1272
https://support.f5.com/csp/article/K64119434?utm_source=f5support&%3Butm_medium=RSS
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
https://people.canonical.com/~ubuntu-security/cve/CVE-2009-5155
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=32806
https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=eb04c21373e2a2885f3d52ff192b0499afe3c672
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
https://sourceware.org/bugzilla/show_bug.cgi?id=11053
https://support.f5.com/csp/article/K64119434
https://access.redhat.com/security/cve/CVE-2009-5155
https://security-tracker.debian.org/tracker/CVE-2009-5155
https://sourceware.org/bugzilla/show_bug.cgi?id=18986
https://security.netapp.com/advisory/ntap-20190315-0002/
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=22793
https://www.mend.io/vulnerability-database/CVE-2009-5155

Severity Score

Weakness Type (CWE)

Data Handling

CWE-19

Top Fix

icon

Upgrade Version

Upgrade to version kyototycoon - no_fix;sysroot_linux-aarch64 - 2.28;wpilib-sys - 0.3.1;gcc_bootstrap_linux-s390x - 12.3.0;gcc_bootstrap_linux-s390x - 11.4.0;gklib - no_fix;metis - 0.2.1;gcc_bootstrap_linux-ppc64le - 11.4.0;gcc_bootstrap_linux-ppc64le - 12.3.0;rbothal - no_fix;gcc_bootstrap_linux-64 - 11.4.0;gcc_bootstrap_linux-64 - 12.3.0;gcc_impl_linux-ppc64le - 7.5.0;gcc_impl_linux-ppc64le - 8.5.0;gcc_linux-64 - 7.3.0;sysroot_linux-s390x - 2.28;cross-localedef-native - 2.30;sysroot_linux-64 - 2.28;AsanTestDependencies - no_fix;combat-dev-mingw64 - no_fix;gcc_bootstrap_linux-aarch64 - 11.4.0;gcc_bootstrap_linux-aarch64 - 12.3.0;gcc_impl_linux-64 - 8.4.0;glibc-initial - no_fix;metis-sys - no_fix;gcc_impl_linux-32 - no_fix;wpilib - 0.2.3;rtools - no_fix;sysroot_linux-ppc64le - 2.28;glibc - 2.30;gcc_linux-32 - 7.3.0;gcc_impl_linux-aarch64 - 8.4.0;suitesparse_sys - no_fix

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us