stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-plUpgrade glibc-langpack-cmnUpgrade glibc-langpack-dvUpgrade glibc-langpack-kkUpgrade glibc-langpack-anUpgrade glibc-langpack-cvUpgrade glibc-langpack-gdUpgrade glibc-langpack-ikUpgrade glibc-langpack-ltUpgrade glibc-langpack-frUpgrade glibc-langpack-magUpgrade glibc-langpack-shsUpgrade glibc-debuginfoUpgrade glibc-langpack-veUpgrade glibc-langpack-yoUpgrade glibc-langpack-yueUpgrade glibc-langpack-afUpgrade glibc-langpack-maiUpgrade glibc-langpack-csbUpgrade glibc-langpack-quzUpgrade glibc-langpack-rajUpgrade glibc-langpack-svUpgrade glibc-langpack-slUpgrade glibc-langpack-bnUpgrade glibc-langpack-iaUpgrade glibc-langpack-furUpgrade glibc-langpack-filUpgrade glibcUpgrade glibc-langpack-mtUpgrade nscdUpgrade glibc-langpack-itUpgrade glibc-headersUpgrade glibc-langpack-orUpgrade glibc-langpack-waeUpgrade glibc-langpack-kwUpgrade glibc-langpack-fiUpgrade glibc-langpack-sqUpgrade glibc-langpack-heUpgrade glibc-langpack-knUpgrade glibc-langpack-tkUpgrade glibc-langpack-arUpgrade glibc-langpack-igUpgrade glibc-langpack-papUpgrade glibc-langpack-mniUpgrade glibc-langpack-thUpgrade glibc-langpack-nsoUpgrade glibc-langpack-tgUpgrade glibc-langpack-chrUpgrade glibc-langpack-huUpgrade glibc-langpack-viUpgrade glibc-langpack-klUpgrade glibc-langpack-asUpgrade glibc-langpack-mkUpgrade glibc-langpack-idUpgrade glibc-langpack-myUpgrade glibc-langpack-brxUpgrade glibc-langpack-astUpgrade glibc-langpack-aaUpgrade glibc-langpack-fyUpgrade glibc-langpack-foUpgrade glibc-langpack-lnUpgrade glibc-langpack-glUpgrade glibc-langpack-kmUpgrade glibc-langpack-paUpgrade glibc-langpack-niuUpgrade glibc-langpack-esUpgrade glibc-langpack-nbUpgrade nss_hesiodUpgrade glibc-langpack-scUpgrade glibc-langpack-liUpgrade glibc-langpack-lzhUpgrade glibc-langpack-beUpgrade glibc-langpack-amUpgrade glibc-langpack-ugUpgrade glibc-langpack-srUpgrade glibc-staticUpgrade glibc-langpack-ceUpgrade nss_dbUpgrade glibc-langpack-bsUpgrade glibc-langpack-ksUpgrade glibc-langpack-anpUpgrade glibc-langpack-psUpgrade glibc-utilsUpgrade glibc-langpack-gvUpgrade glibc-langpack-nhnUpgrade glibc-langpack-bgUpgrade glibc-langpack-woUpgrade glibc-langpack-doiUpgrade glibc-langpack-kaUpgrade glibc-langpack-trUpgrade glibc-langpack-koUpgrade glibc-langpack-msUpgrade glibc-locale-sourceUpgrade glibc-langpack-neUpgrade glibc-langpack-soUpgrade glibc-langpack-crhUpgrade glibc-langpack-omUpgrade glibc-langpack-etUpgrade glibc-langpack-mnUpgrade glibc-langpack-satUpgrade glibc-langpack-htUpgrade glibc-langpack-ocUpgrade glibc-langpack-walUpgrade glibc-langpack-guUpgrade glibc-langpack-mlUpgrade glibc-langpack-lbUpgrade glibc-langpack-lvUpgrade glibc-minimal-langpackUpgrade glibc-langpack-aycUpgrade glibc-all-langpacksUpgrade glibc-langpack-gezUpgrade glibc-langpack-faUpgrade glibc-langpack-hneUpgrade glibc-langpack-brUpgrade glibc-langpack-loUpgrade glibc-langpack-ndsUpgrade glibc-langpack-unmUpgrade glibc-langpack-enUpgrade glibc-langpack-theUpgrade glibc-langpack-bhoUpgrade glibc-benchtestsUpgrade glibc-langpack-hiUpgrade glibc-langpack-yiUpgrade glibc-langpack-ptUpgrade glibc-langpack-swUpgrade glibc-langpack-mgUpgrade glibc-langpack-tcyUpgrade glibc-langpack-daUpgrade glibc-langpack-sgsUpgrade glibc-langpack-caUpgrade glibc-langpack-teUpgrade glibc-langpack-rwUpgrade glibc-commonUpgrade glibc-langpack-miUpgrade glibc-langpack-kokUpgrade glibc-langpack-tiUpgrade glibc-langpack-azUpgrade glibc-langpack-tlUpgrade libcrypt-nssUpgrade glibc-langpack-kuUpgrade glibc-langpack-hakUpgrade glibc-develUpgrade glibc-langpack-nlUpgrade glibc-langpack-hsbUpgrade glibc-langpack-cyUpgrade glibc-langpack-ssUpgrade glibc-langpack-roUpgrade glibc-langpack-taUpgrade glibc-langpack-bynUpgrade glibc-langpack-sdUpgrade glibc-langpack-szlUpgrade glibc-langpack-siUpgrade glibc-langpack-mhrUpgrade glibc-langpack-kyUpgrade libcryptUpgrade glibc-langpack-zhUpgrade glibc-langpack-dzUpgrade glibc-langpack-tsUpgrade glibc-langpack-deUpgrade glibc-langpack-boUpgrade glibc-langpack-nnUpgrade glibc-langpack-saUpgrade glibc-langpack-osUpgrade glibc-langpack-xhUpgrade glibc-langpack-lijUpgrade glibc-langpack-sidUpgrade glibc-langpack-hyUpgrade glibc-langpack-csUpgrade glibc-langpack-seUpgrade glibc-langpack-nrUpgrade glibc-langpack-ruUpgrade nss_nisUpgrade glibc-langpack-ttUpgrade glibc-langpack-bemUpgrade glibc-langpack-stUpgrade glibc-langpack-bhbUpgrade glibc-langpack-berUpgrade glibc-langpack-urUpgrade glibc-langpack-ukUpgrade glibc-langpack-tigUpgrade glibc-langpack-nanUpgrade glibc-langpack-euUpgrade glibc-langpack-lgUpgrade glibc-langpack-isUpgrade glibc-langpack-akUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-jaUpgrade glibc-langpack-iuUpgrade glibc-nss-develUpgrade glibc-langpack-gaUpgrade glibc-langpack-haUpgrade glibc-langpack-ffUpgrade glibc-langpack-eoUpgrade glibc-langpack-elUpgrade glibc-langpack-uzUpgrade glibc-langpack-zuUpgrade glibc-langpack-hrUpgrade glibc-langpack-mrUpgrade glibc-langpack-waUpgrade glibc-langpack-tnUpgrade glibc-langpack-sk | Apr 27, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | May 18, 2018 |
| Centos_linux | — | Upgrade glibc-debuginfoUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-debuginfo-commonUpgrade nscdUpgrade glibc-headersUpgrade glibcUpgrade glibc-devel | Aug 28, 2019 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nscdUpgrade glibc-headersUpgrade glibcUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-devel | Sep 27, 2018 | May 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade glibc-staticUpgrade glibc-headersUpgrade nscdUpgrade glibc-common | Feb 15, 2019 | May 18, 2018 |
| Oracle_linux | — | Upgrade nscdUpgrade glibcUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-devel | Nov 6, 2018 | Feb 4, 2018 |
| Redhat_linux | — | Upgrade glibc-headersUpgrade nscdUpgrade glibc-commonUpgrade glibcUpgrade glibc-debuginfo-commonNo solution existsUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-staticUpgrade glibc-debuginfo | Oct 31, 2018 | May 18, 2018 |
| Suse | — | Upgrade glibc-locale-x86Upgrade glibc-extraUpgrade glibc-profileUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-i18ndataUpgrade glibc-utils-32bitUpgrade glibc-infoUpgrade glibc-x86Upgrade glibc-profile-32bitUpgrade glibc-htmlUpgrade nscdUpgrade glibc-32bitUpgrade glibc-devel-staticUpgrade glibc-localeUpgrade glibcUpgrade glibc-profile-x86Upgrade glibc-locale-baseUpgrade glibc-locale-32bitUpgrade glibc-langUpgrade glibc-locale-base-32bitUpgrade glibc-devel-32bitUpgrade glibc-devel-static-32bit | Jun 8, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6 (Ubuntu Pro)Upgrade libc6 | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub