The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-magUpgrade glibc-langpack-ugUpgrade glibc-benchtestsUpgrade glibc-langpack-bemUpgrade glibc-langpack-cvUpgrade glibc-langpack-sgsUpgrade glibc-langpack-anpUpgrade glibc-langpack-haUpgrade glibc-langpack-tkUpgrade glibc-langpack-theUpgrade glibc-langpack-knUpgrade glibc-utilsUpgrade glibc-locale-sourceUpgrade glibc-langpack-filUpgrade glibc-langpack-ocUpgrade glibc-langpack-itUpgrade glibc-langpack-lzhUpgrade glibcUpgrade glibc-langpack-nbUpgrade glibc-langpack-orUpgrade glibc-langpack-srUpgrade glibc-langpack-tgUpgrade glibc-langpack-svUpgrade nss_nisUpgrade glibc-langpack-idUpgrade glibc-langpack-iuUpgrade glibc-langpack-kwUpgrade glibc-langpack-ruUpgrade glibc-langpack-walUpgrade glibc-langpack-papUpgrade glibc-langpack-nnUpgrade glibc-langpack-csbUpgrade glibc-langpack-furUpgrade glibc-langpack-ceUpgrade glibc-langpack-etUpgrade glibc-langpack-doiUpgrade glibc-langpack-azUpgrade glibc-langpack-bhoUpgrade glibc-langpack-lgUpgrade glibc-langpack-ikUpgrade glibc-langpack-maiUpgrade glibc-langpack-rajUpgrade glibc-langpack-soUpgrade glibc-langpack-ksUpgrade glibc-langpack-ukUpgrade glibc-langpack-gvUpgrade glibc-langpack-mkUpgrade glibc-langpack-paUpgrade glibc-langpack-roUpgrade glibc-langpack-bnUpgrade glibc-commonUpgrade glibc-langpack-cyUpgrade glibc-langpack-ssUpgrade glibc-langpack-arUpgrade glibc-langpack-yueUpgrade glibc-langpack-nsoUpgrade glibc-langpack-psUpgrade glibc-langpack-shsUpgrade glibc-langpack-anUpgrade glibc-headersUpgrade glibc-langpack-asUpgrade glibc-langpack-htUpgrade glibc-langpack-euUpgrade glibc-langpack-akUpgrade glibc-langpack-bgUpgrade glibc-minimal-langpackUpgrade glibc-langpack-igUpgrade glibc-langpack-boUpgrade glibc-langpack-miUpgrade glibc-debuginfoUpgrade glibc-langpack-liUpgrade glibc-langpack-sidUpgrade glibc-langpack-brxUpgrade nscdUpgrade glibc-langpack-zuUpgrade glibc-langpack-waeUpgrade glibc-langpack-kuUpgrade glibc-langpack-woUpgrade glibc-langpack-tsUpgrade glibc-staticUpgrade glibc-langpack-teUpgrade glibc-langpack-sqUpgrade glibc-langpack-thUpgrade glibc-langpack-msUpgrade glibc-langpack-neUpgrade glibc-langpack-brUpgrade glibc-langpack-mgUpgrade glibc-langpack-afUpgrade glibc-langpack-quzUpgrade glibc-langpack-koUpgrade glibc-langpack-chrUpgrade glibc-langpack-cmnUpgrade glibc-langpack-nhnUpgrade glibc-langpack-satUpgrade glibc-langpack-kmUpgrade glibc-langpack-waUpgrade glibc-langpack-lbUpgrade glibc-langpack-lijUpgrade glibc-langpack-unmUpgrade glibc-langpack-bsUpgrade glibc-langpack-gdUpgrade glibc-langpack-myUpgrade glibc-langpack-slUpgrade glibc-langpack-bynUpgrade glibc-langpack-elUpgrade glibc-langpack-glUpgrade glibc-langpack-omUpgrade glibc-langpack-beUpgrade glibc-langpack-bhbUpgrade glibc-langpack-faUpgrade glibc-langpack-kkUpgrade glibc-langpack-frUpgrade glibc-langpack-trUpgrade glibc-langpack-seUpgrade glibc-langpack-mnUpgrade glibc-langpack-foUpgrade glibc-langpack-saUpgrade glibc-langpack-jaUpgrade glibc-langpack-csUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-astUpgrade glibc-langpack-yoUpgrade glibc-langpack-ttUpgrade glibc-langpack-rwUpgrade glibc-langpack-nrUpgrade glibc-langpack-lvUpgrade glibc-langpack-klUpgrade glibc-langpack-urUpgrade glibc-langpack-stUpgrade nss_hesiodUpgrade glibc-langpack-kokUpgrade glibc-develUpgrade glibc-langpack-eoUpgrade glibc-langpack-esUpgrade glibc-langpack-deUpgrade glibc-langpack-xhUpgrade glibc-langpack-scUpgrade glibc-langpack-plUpgrade glibc-langpack-guUpgrade glibc-langpack-kaUpgrade glibc-langpack-ndsUpgrade glibc-langpack-hsbUpgrade glibc-langpack-enUpgrade glibc-langpack-amUpgrade glibc-langpack-nlUpgrade glibc-langpack-aycUpgrade glibc-langpack-mtUpgrade glibc-langpack-caUpgrade glibc-langpack-hrUpgrade glibc-langpack-sdUpgrade libcryptUpgrade glibc-langpack-dvUpgrade glibc-langpack-swUpgrade glibc-langpack-hyUpgrade glibc-langpack-hneUpgrade glibc-langpack-gezUpgrade glibc-langpack-viUpgrade glibc-langpack-isUpgrade glibc-langpack-huUpgrade glibc-langpack-heUpgrade glibc-all-langpacksUpgrade glibc-langpack-hakUpgrade glibc-langpack-mlUpgrade glibc-langpack-tiUpgrade glibc-langpack-tlUpgrade glibc-langpack-siUpgrade glibc-langpack-berUpgrade glibc-langpack-tnUpgrade glibc-langpack-loUpgrade glibc-langpack-tigUpgrade glibc-langpack-szlUpgrade glibc-langpack-mhrUpgrade glibc-langpack-dzUpgrade glibc-langpack-niuUpgrade glibc-langpack-fiUpgrade glibc-langpack-uzUpgrade glibc-langpack-yiUpgrade glibc-langpack-zhUpgrade glibc-langpack-lnUpgrade glibc-langpack-crhUpgrade glibc-langpack-daUpgrade glibc-langpack-mniUpgrade glibc-langpack-nanUpgrade glibc-langpack-skUpgrade glibc-langpack-hiUpgrade glibc-langpack-fyUpgrade glibc-langpack-ltUpgrade glibc-langpack-ptUpgrade glibc-langpack-ffUpgrade glibc-langpack-aaUpgrade nss_dbUpgrade glibc-langpack-tcyUpgrade libcrypt-nssUpgrade glibc-nss-develUpgrade glibc-langpack-taUpgrade glibc-langpack-veUpgrade glibc-langpack-mrUpgrade glibc-langpack-osUpgrade glibc-langpack-kyUpgrade glibc-langpack-iaUpgrade glibc-langpack-ga | Apr 27, 2020 | Oct 22, 2017 |
| Amazon_linux | — | Upgrade glibc | May 11, 2018 | Oct 22, 2017 |
| Centos_linux | — | Upgrade glibc-debuginfoUpgrade glibc-utilsUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-headersUpgrade nscd | Aug 28, 2019 | Oct 22, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Oct 22, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Oct 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nscdUpgrade glibc-staticUpgrade glibc-headersUpgrade glibcUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-common | Nov 30, 2017 | Oct 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibcUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-headersUpgrade glibc-commonUpgrade nscd | Nov 30, 2017 | Oct 22, 2017 |
| Oracle_linux | — | Upgrade glibc-develUpgrade glibc-headersUpgrade glibc-commonUpgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-utils | Apr 19, 2018 | Oct 21, 2017 |
| Redhat_linux | — | Upgrade glibc-commonUpgrade glibc-headersUpgrade glibc-debuginfo-commonNo solution existsUpgrade glibc-develUpgrade glibc-utilsUpgrade nscdUpgrade glibcUpgrade glibc-staticUpgrade glibc-debuginfo | Apr 11, 2018 | Oct 22, 2017 |
| Suse | — | Upgrade glibc-utilsUpgrade glibc-devel-32bitUpgrade glibc-localeUpgrade glibc-locale-x86Upgrade glibc-htmlUpgrade glibcUpgrade glibc-develUpgrade glibc-i18ndataUpgrade glibc-langUpgrade glibc-locale-baseUpgrade glibc-devel-staticUpgrade glibc-profile-32bitUpgrade glibc-locale-32bitUpgrade glibc-x86Upgrade glibc-32bitUpgrade glibc-extraUpgrade glibc-profile-x86Upgrade nscdUpgrade glibc-locale-base-32bitUpgrade glibc-profileUpgrade glibc-info | Jan 15, 2018 | Oct 22, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Oct 22, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub