CVE-1999-0199 — Unchecked Return Value in Glibc

CWE-252 — Unchecked Return ValueCWE-1053 — Missing Documentation for Design7 documents7 sources
Severity
9.8CRITICALNVD
EPSS
0.8%
top 26.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Glibc
Timeline
PublishedOct 6
Latest updateApr 21

Description

manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDgnu/glibc< 2.2
▶Debiangnu/glibc< 2.2-1+3

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-7hm4-28mg-fmp9: manual/search↗2022-04-21
▶
OSV
CVE-1999-0199: manual/search↗2020-10-06
▶
CVEList
CVE-1999-0199: manual/search↗2020-10-06
▶

📋Vendor Advisories

2
Red Hat
glibc: manual/search.texi lacks a statement about the unspecified tdelete return value upon deletion of a tree's root↗1999-11-09
▶
Debian
CVE-1999-0199: glibc - manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement...↗1999
▶

💬Community

1
Bugzilla
CVE-1999-0199 glibc: manual/search.texi lacks a statement about the unspecified tdelete return value upon deletion of a tree's root↗2020-10-06
▶
CVE-1999-0199 — Unchecked Return Value in GNU Glibc | cvebase