In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.
Max CVSS
7.5
EPSS Score
0.51%
Published
2019-02-26
Updated
2021-06-29
The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon.
Max CVSS
5.5
EPSS Score
0.04%
Published
2019-04-10
Updated
2019-04-11
2 vulnerabilities found