musl libc regex handling flaw allows heap out-of-bounds writes
Linux's musl system library can be hacked through untrusted search patterns.
Summary
musl libc before 1.2.7, when an untrusted regular expression is passed to regcomp, has integer overflows that can lead to wrong allocation sizes and out-of-bounds heap writes. Programs on Linux that use this library are affected.
Affected when
- musl libc before 1.2.7
- untrusted regular expression used with regcomp
What to do
Update musl libc to 1.2.7 or later. The source gives no other stopgap.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen