In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 28fbd7b13b4d3074b16db913aedc9d8d37ab41e7 |
| n/a | n/a | < 7402c4bcb8a3f0d2ef4e687cd45c76be489cf509 |