CVE-2019-9192 describes an uncontrolled recursion vulnerability in the GNU C Library (glibc) versions through 2.29, specifically within the check_dst_limits_calc_pos_1 function in posix/regexec.c. This flaw, which can be triggered by a crafted regular expression pattern, affects systems utilizing glibc. The vulnerability carries a CVSS v3 score of 7.5 (High), indicating a significant risk. Its attack vector is network-based with low attack complexity, requiring no user interaction or privileges, and could lead to a denial of service (availability impact). Currently, there is no evidence of active exploitation, and no public exploit code or Metasploit/Nuclei modules are available. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.29CPE matchmatch criteria | cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c
Feb 26, 2019In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion
Feb 12, 2019