Buffer overflow in Gnu Glibc

CVE-2013-0242

Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.

Vulnerability class: Buffer Overflow

EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.

Affected products

  • Gnu Glibc — versions 2.17
  • N/a — versions n/a

Weakness classification (CWE)

References