EXPOSURES › CVE-2019-9169
CVE-2019-9169
CRITICAL
DETAIL
SourceNVD · cve
Published2019-02-26
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-9169 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
Canonical's glibc vulnerability was a critical heap-based buffer over-read in a foundational library, widely recognized as a severe security failure despite eventual patching.
Severe technical flaw in a core system library, treated as a critical vulnerability requiring immediate attention and patching.
"In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match."
No substantive coverage; technical error in data retrieval prevents sentiment assessment.
AFFECTED FEDRAMP PRODUCTS · 1
| PRODUCT | STATUS |
|---|---|
| Cloud Insights NetApp |
In Process |