The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-foUpgrade glibc-langpack-lijUpgrade glibc-langpack-bgUpgrade glibc-langpack-thUpgrade glibc-langpack-esUpgrade glibc-langpack-tgUpgrade glibc-langpack-asUpgrade glibc-langpack-bhbUpgrade glibc-langpack-tiUpgrade glibc-langpack-enUpgrade glibc-langpack-magUpgrade glibc-headersUpgrade glibc-langpack-kwUpgrade glibc-langpack-srUpgrade glibc-langpack-daUpgrade glibc-langpack-kokUpgrade glibc-langpack-brUpgrade glibc-nss-develUpgrade glibc-langpack-gaUpgrade glibc-langpack-bhoUpgrade glibc-all-langpacksUpgrade glibc-langpack-siUpgrade glibc-langpack-ltUpgrade glibc-langpack-caUpgrade glibc-langpack-euUpgrade glibc-langpack-osUpgrade glibc-langpack-gdUpgrade glibc-langpack-hrUpgrade glibc-langpack-hyUpgrade glibc-langpack-quzUpgrade libcrypt-nssUpgrade glibc-langpack-viUpgrade glibc-langpack-mtUpgrade glibc-langpack-boUpgrade glibc-langpack-urUpgrade glibc-locale-sourceUpgrade glibc-langpack-lvUpgrade glibc-langpack-crhUpgrade glibc-langpack-jaUpgrade glibc-langpack-mrUpgrade nss_dbUpgrade glibc-langpack-dzUpgrade glibc-langpack-amUpgrade glibc-develUpgrade glibc-langpack-sqUpgrade glibc-langpack-klUpgrade glibc-langpack-mniUpgrade glibc-langpack-stUpgrade glibc-langpack-tnUpgrade glibc-langpack-iaUpgrade glibc-langpack-arUpgrade glibc-langpack-walUpgrade glibc-benchtestsUpgrade glibc-langpack-slUpgrade nss_hesiodUpgrade glibc-langpack-tsUpgrade glibc-langpack-astUpgrade glibc-langpack-plUpgrade glibc-langpack-sgsUpgrade glibc-langpack-taUpgrade glibc-langpack-hsbUpgrade glibc-langpack-aycUpgrade glibc-langpack-ptUpgrade glibc-langpack-ssUpgrade glibc-langpack-heUpgrade glibc-langpack-liUpgrade glibc-langpack-yoUpgrade glibc-langpack-haUpgrade glibc-langpack-isUpgrade glibc-langpack-elUpgrade glibc-langpack-berUpgrade glibc-langpack-rwUpgrade glibc-langpack-nanUpgrade glibc-langpack-uzUpgrade glibc-langpack-hiUpgrade glibc-langpack-aaUpgrade glibc-langpack-dvUpgrade glibc-langpack-yiUpgrade glibc-langpack-waeUpgrade glibc-langpack-seUpgrade glibc-langpack-htUpgrade glibc-langpack-kaUpgrade glibc-langpack-kyUpgrade glibc-langpack-lnUpgrade glibc-langpack-fiUpgrade glibc-langpack-doiUpgrade glibc-langpack-bynUpgrade glibc-langpack-veUpgrade glibc-langpack-cyUpgrade glibc-langpack-glUpgrade glibc-langpack-etUpgrade glibc-langpack-guUpgrade glibc-langpack-hneUpgrade glibc-langpack-soUpgrade glibc-langpack-szlUpgrade glibc-langpack-nlUpgrade glibc-langpack-paUpgrade glibc-langpack-omUpgrade glibc-langpack-huUpgrade glibc-langpack-mhrUpgrade glibc-langpack-eoUpgrade glibc-langpack-ugUpgrade glibc-langpack-fyUpgrade glibc-langpack-sdUpgrade glibc-langpack-rajUpgrade glibc-langpack-kuUpgrade glibc-langpack-svUpgrade glibc-langpack-saUpgrade glibc-langpack-niuUpgrade glibc-debuginfoUpgrade glibc-langpack-afUpgrade glibc-langpack-sidUpgrade glibc-langpack-nrUpgrade glibc-langpack-nnUpgrade glibc-langpack-ruUpgrade glibcUpgrade glibc-langpack-tigUpgrade glibc-langpack-nhnUpgrade glibc-langpack-koUpgrade glibc-langpack-beUpgrade glibc-langpack-itUpgrade glibc-minimal-langpackUpgrade glibc-langpack-bnUpgrade glibc-staticUpgrade glibc-langpack-bemUpgrade glibc-langpack-faUpgrade glibc-langpack-maiUpgrade glibc-langpack-miUpgrade glibc-langpack-knUpgrade glibc-langpack-psUpgrade glibc-langpack-brxUpgrade glibc-langpack-mgUpgrade glibc-langpack-cvUpgrade glibc-langpack-nbUpgrade glibc-langpack-zhUpgrade nss_nisUpgrade glibc-langpack-satUpgrade glibc-langpack-neUpgrade glibc-langpack-tlUpgrade glibc-langpack-idUpgrade glibc-langpack-tkUpgrade glibc-langpack-ffUpgrade glibc-langpack-csbUpgrade glibc-langpack-anUpgrade glibc-langpack-scUpgrade glibc-langpack-gvUpgrade glibc-langpack-yueUpgrade glibc-langpack-ttUpgrade glibc-langpack-furUpgrade glibc-langpack-ksUpgrade glibc-langpack-deUpgrade glibc-langpack-zuUpgrade glibc-langpack-shsUpgrade glibc-langpack-igUpgrade glibc-langpack-bsUpgrade glibc-langpack-kmUpgrade glibc-langpack-csUpgrade glibc-langpack-gezUpgrade glibc-langpack-lzhUpgrade glibc-langpack-iuUpgrade glibc-langpack-mkUpgrade glibc-langpack-kkUpgrade glibc-langpack-cmnUpgrade glibc-langpack-chrUpgrade glibc-utilsUpgrade glibc-langpack-swUpgrade glibc-langpack-msUpgrade glibc-langpack-loUpgrade glibc-langpack-trUpgrade glibc-langpack-tcyUpgrade glibc-langpack-mlUpgrade glibc-langpack-lgUpgrade glibc-langpack-frUpgrade glibc-langpack-lbUpgrade glibc-langpack-myUpgrade glibc-langpack-waUpgrade glibc-langpack-ndsUpgrade glibc-langpack-skUpgrade glibc-langpack-hakUpgrade glibc-langpack-ukUpgrade glibc-langpack-teUpgrade glibc-langpack-ocUpgrade glibc-langpack-mnUpgrade glibc-langpack-xhUpgrade glibc-langpack-unmUpgrade glibc-langpack-ceUpgrade glibc-langpack-filUpgrade libcryptUpgrade glibc-langpack-akUpgrade glibc-langpack-orUpgrade glibc-langpack-anpUpgrade glibc-langpack-nsoUpgrade glibc-langpack-azUpgrade glibc-debuginfo-commonUpgrade glibc-commonUpgrade glibc-langpack-roUpgrade glibc-langpack-woUpgrade glibc-langpack-ikUpgrade nscdUpgrade glibc-langpack-papUpgrade glibc-langpack-the | Nov 10, 2022 | Mar 20, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Mar 20, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 25, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Aug 16, 2019 | Mar 20, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2015 |
| Suse | — | Upgrade glibc-32bitUpgrade glibc-infoUpgrade glibc-utilsUpgrade nscdUpgrade glibc-locale-base-32bitUpgrade glibc-extraUpgrade glibc-devel-staticUpgrade glibc-devel-32bitUpgrade glibc-locale-baseUpgrade glibcUpgrade glibc-i18ndataUpgrade glibc-localeUpgrade glibc-develUpgrade glibc-profile | Mar 15, 2022 | Mar 20, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub