An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-slUpgrade glibc-langpack-thUpgrade glibc-langpack-scUpgrade glibc-langpack-knUpgrade glibc-langpack-quzUpgrade glibc-langpack-dvUpgrade glibc-langpack-neUpgrade glibc-langpack-huUpgrade glibc-langpack-mkUpgrade glibc-langpack-woUpgrade glibc-langpack-viUpgrade glibc-utilsUpgrade glibc-langpack-etUpgrade glibc-langpack-svUpgrade glibc-langpack-nbUpgrade glibc-langpack-omUpgrade glibc-langpack-beUpgrade glibc-langpack-hsbUpgrade glibc-langpack-tgUpgrade glibc-langpack-paUpgrade glibc-langpack-astUpgrade glibc-debuginfoUpgrade glibc-langpack-gdUpgrade glibc-langpack-htUpgrade glibc-langpack-iaUpgrade glibc-staticUpgrade glibc-langpack-glUpgrade glibc-langpack-msUpgrade glibc-langpack-maiUpgrade glibc-langpack-ikUpgrade glibc-langpack-sqUpgrade glibc-langpack-walUpgrade glibc-langpack-bnUpgrade glibc-langpack-kmUpgrade glibc-langpack-ugUpgrade glibc-langpack-myUpgrade glibc-langpack-ltUpgrade glibc-langpack-furUpgrade glibc-langpack-crhUpgrade glibc-langpack-ocUpgrade glibc-langpack-lzhUpgrade glibc-headersUpgrade glibc-langpack-yueUpgrade glibc-langpack-ptUpgrade glibc-langpack-bemUpgrade glibc-langpack-idUpgrade glibc-langpack-kaUpgrade glibc-langpack-bgUpgrade glibc-langpack-plUpgrade glibc-langpack-hiUpgrade glibc-langpack-magUpgrade glibc-langpack-veUpgrade glibc-langpack-asUpgrade nss_nisUpgrade glibc-langpack-lbUpgrade glibc-langpack-satUpgrade glibc-langpack-ksUpgrade glibc-langpack-trUpgrade glibc-langpack-filUpgrade glibc-langpack-liUpgrade glibc-langpack-fiUpgrade glibc-langpack-koUpgrade glibc-langpack-mniUpgrade glibc-langpack-mnUpgrade glibc-langpack-soUpgrade glibc-langpack-nsoUpgrade glibc-langpack-anUpgrade glibc-langpack-bsUpgrade glibc-langpack-papUpgrade glibc-langpack-osUpgrade nss_hesiodUpgrade nss_dbUpgrade glibc-langpack-azUpgrade glibc-langpack-srUpgrade glibc-langpack-faUpgrade glibc-langpack-doiUpgrade glibc-langpack-niuUpgrade glibc-langpack-chrUpgrade glibc-langpack-frUpgrade nscdUpgrade libcrypt-nssUpgrade glibc-benchtestsUpgrade glibc-langpack-gvUpgrade glibc-langpack-arUpgrade glibc-langpack-taUpgrade glibc-langpack-tlUpgrade glibc-langpack-ceUpgrade glibc-langpack-tiUpgrade glibc-langpack-kwUpgrade glibc-langpack-rajUpgrade glibc-langpack-sgsUpgrade glibc-locale-sourceUpgrade glibc-langpack-nhnUpgrade glibc-langpack-daUpgrade glibc-langpack-dzUpgrade glibc-langpack-ffUpgrade glibc-langpack-brxUpgrade glibc-langpack-mlUpgrade glibc-langpack-bynUpgrade glibc-langpack-deUpgrade glibc-langpack-loUpgrade glibc-langpack-tkUpgrade glibc-langpack-enUpgrade glibc-langpack-theUpgrade glibc-langpack-mhrUpgrade glibc-langpack-tcyUpgrade glibc-langpack-teUpgrade glibc-langpack-cvUpgrade glibc-langpack-haUpgrade glibc-langpack-itUpgrade glibc-langpack-tnUpgrade glibc-langpack-orUpgrade glibc-langpack-siUpgrade glibc-langpack-euUpgrade glibc-langpack-yiUpgrade glibc-langpack-esUpgrade glibc-langpack-hneUpgrade glibc-langpack-foUpgrade glibc-langpack-cyUpgrade glibc-langpack-zhUpgrade glibc-langpack-csbUpgrade glibc-langpack-klUpgrade glibc-minimal-langpackUpgrade glibc-langpack-aaUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-eoUpgrade glibc-langpack-boUpgrade glibc-langpack-lnUpgrade glibc-langpack-ukUpgrade glibc-langpack-gaUpgrade glibcUpgrade glibc-langpack-mrUpgrade glibc-langpack-yoUpgrade glibc-langpack-uzUpgrade glibc-langpack-saUpgrade glibc-langpack-nnUpgrade glibc-langpack-mgUpgrade glibc-langpack-lgUpgrade glibc-langpack-gezUpgrade glibc-langpack-skUpgrade glibc-langpack-bhoUpgrade glibc-langpack-fyUpgrade glibc-langpack-anpUpgrade glibc-langpack-igUpgrade glibc-langpack-csUpgrade glibc-langpack-tsUpgrade glibc-langpack-zuUpgrade glibc-langpack-miUpgrade glibc-langpack-kkUpgrade glibc-langpack-ndsUpgrade glibc-langpack-kokUpgrade glibc-langpack-hrUpgrade glibc-langpack-bhbUpgrade glibc-langpack-lvUpgrade glibc-langpack-psUpgrade glibc-langpack-szlUpgrade glibc-langpack-mtUpgrade glibc-langpack-xhUpgrade glibc-langpack-nlUpgrade glibc-langpack-isUpgrade glibc-langpack-rwUpgrade glibc-commonUpgrade glibc-langpack-lijUpgrade glibc-langpack-ssUpgrade glibc-langpack-berUpgrade glibc-langpack-akUpgrade glibc-langpack-kyUpgrade glibc-langpack-ruUpgrade libcryptUpgrade glibc-langpack-aycUpgrade glibc-langpack-elUpgrade glibc-langpack-jaUpgrade glibc-langpack-cmnUpgrade glibc-langpack-urUpgrade glibc-langpack-kuUpgrade glibc-langpack-unmUpgrade glibc-langpack-waUpgrade glibc-langpack-seUpgrade glibc-langpack-sdUpgrade glibc-langpack-swUpgrade glibc-langpack-amUpgrade glibc-develUpgrade glibc-langpack-nanUpgrade glibc-nss-develUpgrade glibc-langpack-afUpgrade glibc-langpack-waeUpgrade glibc-langpack-nrUpgrade glibc-langpack-stUpgrade glibc-langpack-iuUpgrade glibc-langpack-hakUpgrade glibc-langpack-guUpgrade glibc-langpack-heUpgrade glibc-langpack-tigUpgrade glibc-langpack-ttUpgrade glibc-langpack-sidUpgrade glibc-langpack-shsUpgrade glibc-langpack-roUpgrade glibc-langpack-caUpgrade glibc-langpack-hyUpgrade glibc-langpack-brUpgrade glibc-all-langpacks | Apr 27, 2020 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Suse | — | Upgrade glibc-htmlUpgrade nscdUpgrade glibc-locale-32bitUpgrade glibcUpgrade glibc-localeUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-langUpgrade glibc-profile-32bitUpgrade glibc-extraUpgrade glibc-i18ndataUpgrade glibc-devel-static-32bitUpgrade glibc-utils-32bitUpgrade glibc-locale-base-32bitUpgrade glibc-32bitUpgrade glibc-infoUpgrade glibc-profileUpgrade glibc-devel-staticUpgrade glibc-devel-32bitUpgrade glibc-locale-base | Jun 7, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6 | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub