CVE-1999-0199

CriticalCVSS 9.8/10Last modified Sep 25, 2026

Description

manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-252

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://ftp.gnu.org/gnu/glibc/glibc-2.2.tar.gzProduct, Vendor Advisory
https://github.com/bminor/glibc/commit/2864e767053317538feafa815046fff89e5a16be#diff-94e8c502f255fdfc346df0e29fd4ef40Patch, Third Party Advisory
https://www.cee.studio/tdelete.htmlExploit, Third Party Advisory
https://ftp.gnu.org/gnu/glibc/glibc-2.2.tar.gzProduct, Vendor Advisory
https://github.com/bminor/glibc/commit/2864e767053317538feafa815046fff89e5a16be#diff-94e8c502f255fdfc346df0e29fd4ef40Patch, Third Party Advisory
https://www.cee.studio/tdelete.htmlExploit, Third Party Advisory

Timeline

Published: Oct 6, 2020
Last modified: Sep 25, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-020010.0Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any usern CVE-1999-02055.0Denial of service in Sendmail 8.6.11 and 8.6.12.CVE-1999-022010.0Attackers can do a denial of service of IRC by crashing the server.CVE-1999-02215.0Denial of service of Ascend routers through port 150 (remote administration).CVE-1999-02225.0Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.CVE-1999-02232.1Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.CVE-1999-02245.0Denial of service in Windows NT messenger service through a long username.CVE-1999-022610.0Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.CVE-1999-02295.0Denial of service in Windows NT IIS server using ..\..CVE-1999-02315.0Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly CVE-1999-02407.5Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.CVE-1999-024310.0Linux cfingerd could be exploited to gain root access.