CVE-2017-9729

High

Published: 16/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in misc/regex/regexec.c when processing a crafted regular expression.

Risk Assessment

An attacker may exploit this vulnerability to cause application or system crashes, potentially leading to service downtime.

Recommendation

It is recommended to upgrade to a newer version of uClibc to mitigate this vulnerability.

Other vulnerabilities in uClibc 0.9.33.2

CVE-2017-9728Critical
In uClibc version 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression.

Original NVD description (English source)

In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in misc/regex/regexec.c when processing a crafted regular expression.