← CVE Tracker
9.8CRITICAL

CVE-1999-0199 — manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified…

Gnu · Glibc · Published 6 Oct 2020 · Modified 25 Sept 2026

Description

manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.

References

What to do
  1. Check whether Glibc is in your asset inventory.
  2. Patch in the next maintenance window; prioritise internet-facing systems.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-1999-0199