PatchFirst · Latest vulnerabilities
Vulnerabilities published for gnulib in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.
The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing.
Check your installed stack and versions against the current vulnerability feeds.