CVE-2017-9728: Critical severity uClibc uClibc vulnerability
Published Jun 16, 2017
·Updated
In uClibc 0.9.33.2, there is an out-of-bounds read in the getsubexp function in misc/regex/regexec.c when processing a crafted regular expression.
Affected Software
1 affected component
uClibc uClibc=0.9.33.2
Event History
Jun 16, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9728?
CVE-2017-9728 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2017-9728?
To fix CVE-2017-9728, you should update uClibc to a version later than 0.9.33.2 that addresses this vulnerability.
3
What software is affected by CVE-2017-9728?
CVE-2017-9728 specifically affects uClibc version 0.9.33.2.
4
What type of vulnerability is CVE-2017-9728?
CVE-2017-9728 is an out-of-bounds read vulnerability related to regular expression processing.
5
Can CVE-2017-9728 be exploited remotely?
Yes, CVE-2017-9728 can potentially be exploited remotely if an attacker can send crafted regular expressions to the affected software.