Critical severity9.8NVD Advisory· Published Oct 6, 2020· Updated Sep 25, 2026

CVE-1999-0199

Description

manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/C Librarycpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.2
GNU/Glibc2 versions
cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*range: <2.2
- (no CPE)range: <2.2

Patches

Vulnerability mechanics

References

github.com/bminor/glibc/commit/2864e767053317538feafa815046fff89e5a16benvdPatchThird Party Advisory
www.cee.studio/tdelete.htmlnvdExploitThird Party Advisory
ftp.gnu.org/gnu/glibc/glibc-2.2.tar.gznvdProductVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000