CVE-2017-9729: High severity uClibc uClibc vulnerability
Published Jun 16, 2017
·Updated
In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression.
Affected Software
1 affected component
uClibc uClibc=0.9.33.2
Event History
Jun 16, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9729?
CVE-2017-9729 has a severity rating that indicates a significant risk due to its potential for stack exhaustion through uncontrolled recursion.
2
How do I fix CVE-2017-9729?
To fix CVE-2017-9729, you should upgrade to a version of uClibc newer than 0.9.33.2 where this vulnerability has been patched.
3
What software is affected by CVE-2017-9729?
CVE-2017-9729 specifically affects uClibc version 0.9.33.2.
4
What type of vulnerability is CVE-2017-9729?
CVE-2017-9729 is a stack exhaustion vulnerability caused by uncontrolled recursion in the regex processing function.
5
Can CVE-2017-9729 lead to remote code execution?
CVE-2017-9729 may lead to denial-of-service conditions, but it does not directly lead to remote code execution.