Steelstore CVEs and Security Vulnerabilities

CVE-2018-20796

glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

CVSS 3.0 · 7.5 High EPSS 5.8% KEV · Not listed

Vendors

Gnu Netapp

Products

Glibc Cloud Backup Ontap Select Deploy Administration Utility and 1 more

CVE-2009-5155

glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result

In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.

CVSS 3.0 · 7.5 High EPSS 3.9% KEV · Not listed