CVE-1999-0199 Other in n/a

Critical 9.8 Published 6 Oct 2020 Updated 1 Aug 2024

Missing documentation in glibc regarding tdelete return values may lead developers to mishandle dangling pointers, potentially causing application instability.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-1999-0199?

CVE-1999-0199 is a critical vulnerability in Gnu Glibc, published on 6 Oct 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.

Weakness: CWE-252

Which versions are affected by CVE-1999-0199?

It affects 1 product.

Products include Gnu Glibc.

How do I fix CVE-1999-0199?

Upgrade to a fixed version.

Is CVE-1999-0199 being exploited?

There is no known exploitation of CVE-1999-0199 in the wild and no public exploit code.

All Gnu Glibc vulnerabilities

Sources

Also known as DEBIAN-CVE-1999-0199, GHSA-7hm4-28mg-fmp9.