CVE-2009-5155

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.28

Description The issue is related to the parse reg exp function in the GNU C Library, which misparses alternatives. This can allow attackers to cause a denial of service, resulting in an assertion failure and application exit, or trigger an incorrect result by attempting a regular-expression match. The vulnerability is associated with data processing errors.

Recommendations For versions prior to 2.28, update to version 2.28 or later to resolve the issue. As a temporary workaround, consider restricting the use of regular expressions in affected applications until a patch is available.