Findings

CVE-2019-9169

In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regula…

Published Feb 26, 2019 · updated Oct 14, 2026 · gnu glibc

In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 26, 2019 · NIST NVD

    Detected

    In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.

  2. Oct 14, 2026 · NIST NVD

    Updated

    In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.

Affected

  • cpe canonical/ubuntu linux16.04
  • cpe gnu/glibcversion unspecified
  • cpe mcafee/web gatewayversion unspecified
  • cpe netapp/cloud backupversion unspecified
  • cpe netapp/ontap select deploy administration utilityversion unspecified
  • cpe netapp/steelstore cloud integrated storageversion unspecified

Sources

  • NIST NVDCVE-2019-9169

    In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.

    nvd.nist.gov

References