The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-gvUpgrade glibc-langpack-klUpgrade glibc-langpack-daUpgrade glibc-langpack-fiUpgrade glibc-langpack-iaUpgrade glibc-langpack-koUpgrade glibc-langpack-nbUpgrade glibc-langpack-rajUpgrade glibc-langpack-lzhUpgrade nscdUpgrade glibc-langpack-lnUpgrade nss_hesiodUpgrade glibc-langpack-glUpgrade glibc-langpack-etUpgrade glibc-langpack-hiUpgrade glibc-langpack-srUpgrade glibc-langpack-anUpgrade glibc-langpack-arUpgrade glibc-langpack-mnUpgrade glibc-langpack-soUpgrade glibc-langpack-amUpgrade glibc-debuginfoUpgrade glibc-langpack-nhnUpgrade glibc-langpack-plUpgrade glibc-langpack-rwUpgrade glibc-langpack-nsoUpgrade glibc-langpack-gdUpgrade glibc-langpack-swUpgrade glibc-langpack-ikUpgrade glibc-langpack-myUpgrade glibc-langpack-cmnUpgrade glibc-langpack-knUpgrade glibc-langpack-satUpgrade glibc-langpack-tiUpgrade glibc-langpack-tlUpgrade glibc-langpack-kmUpgrade glibc-langpack-heUpgrade glibc-langpack-waUpgrade glibc-staticUpgrade glibc-langpack-tgUpgrade glibc-langpack-kaUpgrade glibc-langpack-scUpgrade glibc-langpack-isUpgrade glibc-langpack-ksUpgrade glibc-langpack-mkUpgrade glibc-langpack-ceUpgrade glibc-langpack-ugUpgrade glibc-langpack-chrUpgrade glibc-langpack-astUpgrade glibc-langpack-esUpgrade glibc-langpack-bgUpgrade glibc-langpack-frUpgrade glibc-langpack-msUpgrade glibc-langpack-psUpgrade glibc-langpack-slUpgrade glibc-langpack-filUpgrade glibc-locale-sourceUpgrade glibc-langpack-magUpgrade glibc-langpack-quzUpgrade glibc-langpack-yueUpgrade glibc-langpack-trUpgrade glibc-langpack-htUpgrade glibc-langpack-kwUpgrade nss_nisUpgrade glibc-langpack-afUpgrade glibc-langpack-yoUpgrade glibc-langpack-liUpgrade glibc-langpack-beUpgrade glibc-headersUpgrade nss_dbUpgrade glibc-langpack-furUpgrade glibc-langpack-omUpgrade glibc-langpack-asUpgrade glibc-langpack-papUpgrade glibc-langpack-sqUpgrade glibc-langpack-walUpgrade glibc-utilsUpgrade glibc-langpack-veUpgrade glibc-langpack-crhUpgrade glibc-langpack-niuUpgrade glibc-langpack-bnUpgrade glibc-langpack-mniUpgrade glibc-langpack-svUpgrade glibc-langpack-thUpgrade glibc-langpack-viUpgrade libcrypt-nssUpgrade glibc-langpack-ocUpgrade glibc-langpack-taUpgrade glibc-langpack-paUpgrade glibc-langpack-dvUpgrade glibc-langpack-ltUpgrade glibc-langpack-maiUpgrade glibc-langpack-neUpgrade glibc-langpack-idUpgrade glibc-langpack-doiUpgrade glibc-langpack-bsUpgrade glibc-langpack-fyUpgrade glibc-debuginfo-commonUpgrade glibc-benchtestsUpgrade libcryptUpgrade glibc-langpack-bemUpgrade glibc-langpack-yiUpgrade glibc-langpack-tigUpgrade glibc-langpack-bynUpgrade glibc-langpack-azUpgrade glibc-langpack-aycUpgrade glibc-langpack-boUpgrade glibc-langpack-tkUpgrade glibc-langpack-enUpgrade glibc-langpack-haUpgrade glibc-langpack-foUpgrade glibc-langpack-waeUpgrade glibc-langpack-nlUpgrade glibc-langpack-hneUpgrade glibc-langpack-seUpgrade glibc-langpack-unmUpgrade glibc-langpack-elUpgrade glibc-langpack-bhoUpgrade glibc-langpack-lvUpgrade glibc-langpack-faUpgrade glibc-langpack-woUpgrade glibc-langpack-lgUpgrade glibc-langpack-ffUpgrade glibc-langpack-sgsUpgrade glibc-langpack-kyUpgrade glibc-langpack-zhUpgrade glibc-langpack-kokUpgrade glibc-langpack-saUpgrade glibc-langpack-kkUpgrade glibc-langpack-tnUpgrade glibc-langpack-kuUpgrade glibc-langpack-skUpgrade glibc-langpack-tcyUpgrade glibc-langpack-xhUpgrade glibc-langpack-ttUpgrade glibc-langpack-sidUpgrade glibc-commonUpgrade glibc-langpack-hrUpgrade glibc-langpack-brxUpgrade glibc-langpack-cvUpgrade glibc-langpack-dzUpgrade glibc-langpack-mhrUpgrade glibc-langpack-sdUpgrade glibc-langpack-roUpgrade glibc-langpack-nnUpgrade glibc-langpack-ndsUpgrade glibc-langpack-huUpgrade glibc-langpack-hsbUpgrade glibc-langpack-hakUpgrade glibc-langpack-caUpgrade glibc-langpack-akUpgrade glibc-langpack-itUpgrade glibc-langpack-nrUpgrade glibc-langpack-zuUpgrade glibc-langpack-ruUpgrade glibc-langpack-mgUpgrade glibc-langpack-lbUpgrade glibc-langpack-iuUpgrade glibc-langpack-gaUpgrade glibc-langpack-cyUpgrade glibc-langpack-aaUpgrade glibc-langpack-anpUpgrade glibc-langpack-hyUpgrade glibc-langpack-ukUpgrade glibc-langpack-tsUpgrade glibc-langpack-theUpgrade glibc-langpack-szlUpgrade glibc-langpack-orUpgrade glibc-langpack-csbUpgrade glibc-langpack-stUpgrade glibc-langpack-ssUpgrade glibc-langpack-miUpgrade glibc-all-langpacksUpgrade glibc-langpack-mlUpgrade glibc-langpack-igUpgrade glibcUpgrade glibc-langpack-nanUpgrade glibc-nss-develUpgrade glibc-langpack-uzUpgrade glibc-langpack-teUpgrade glibc-langpack-ptUpgrade glibc-langpack-lijUpgrade glibc-langpack-urUpgrade glibc-langpack-gezUpgrade glibc-langpack-jaUpgrade glibc-langpack-siUpgrade glibc-langpack-shsUpgrade glibc-langpack-mrUpgrade glibc-langpack-osUpgrade glibc-langpack-loUpgrade glibc-langpack-guUpgrade glibc-langpack-deUpgrade glibc-langpack-eoUpgrade glibc-langpack-csUpgrade glibc-langpack-brUpgrade glibc-langpack-berUpgrade glibc-langpack-bhbUpgrade glibc-develUpgrade glibc-langpack-mtUpgrade glibc-langpack-euUpgrade glibc-minimal-langpack | Apr 27, 2020 | Oct 20, 2017 |
| Amazon_linux | — | Upgrade glibc | May 11, 2018 | Oct 20, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 20, 2017 |
| Centos_linux | — | Upgrade glibc-debuginfoUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade nscd | Aug 28, 2019 | Oct 20, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Oct 20, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-commonUpgrade nscdUpgrade glibc | Nov 30, 2017 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-develUpgrade glibcUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-commonUpgrade nscdUpgrade glibc-utils | Nov 30, 2017 | Oct 20, 2017 |
| Oracle_linux | — | Upgrade glibc-utilsUpgrade glibc-staticUpgrade nscdUpgrade glibc-headersUpgrade glibcUpgrade glibc-commonUpgrade glibc-devel | Apr 19, 2018 | Oct 19, 2017 |
| Redhat_linux | — | Upgrade glibc-staticNo solution existsUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade nscdUpgrade glibc-debuginfo-commonUpgrade glibc-headers | Apr 11, 2018 | Oct 20, 2017 |
| Suse | — | Upgrade glibc-develUpgrade glibc-htmlUpgrade glibc-langUpgrade glibc-localeUpgrade glibc-devel-32bitUpgrade glibc-devel-staticUpgrade glibc-locale-baseUpgrade glibc-i18ndataUpgrade glibcUpgrade glibc-locale-x86Upgrade glibc-utilsUpgrade glibc-infoUpgrade glibc-x86Upgrade nscdUpgrade glibc-32bitUpgrade glibc-profile-x86Upgrade glibc-locale-base-32bitUpgrade glibc-profile-32bitUpgrade glibc-profileUpgrade glibc-locale-32bitUpgrade glibc-extra | Jan 13, 2018 | Oct 20, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Oct 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub