The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-chrUpgrade glibc-langpack-euUpgrade glibc-langpack-soUpgrade glibc-langpack-mhrUpgrade glibc-langpack-nbUpgrade glibc-langpack-hsbUpgrade glibc-langpack-kokUpgrade glibc-langpack-itUpgrade glibc-langpack-ikUpgrade glibc-langpack-slUpgrade glibc-langpack-glUpgrade glibc-langpack-uzUpgrade glibc-langpack-lijUpgrade glibc-langpack-ukUpgrade glibc-langpack-ffUpgrade glibc-langpack-haUpgrade glibc-langpack-tnUpgrade glibc-minimal-langpackUpgrade glibc-langpack-csbUpgrade glibc-langpack-nanUpgrade glibc-langpack-elUpgrade glibc-langpack-kkUpgrade glibc-langpack-kuUpgrade glibc-langpack-myUpgrade glibc-langpack-ruUpgrade glibc-langpack-sidUpgrade nss_hesiodUpgrade glibc-langpack-aycUpgrade glibc-headersUpgrade glibc-langpack-kyUpgrade glibc-langpack-papUpgrade glibc-langpack-loUpgrade glibc-langpack-satUpgrade glibc-langpack-yoUpgrade glibc-langpack-akUpgrade glibc-langpack-cyUpgrade glibc-langpack-hakUpgrade glibc-langpack-bynUpgrade glibc-langpack-jaUpgrade glibc-langpack-bhoUpgrade glibc-langpack-lbUpgrade glibc-langpack-neUpgrade glibc-langpack-nlUpgrade glibc-langpack-berUpgrade glibc-langpack-nrUpgrade glibc-langpack-liUpgrade glibc-langpack-bhbUpgrade glibc-langpack-anpUpgrade glibc-langpack-csUpgrade glibcUpgrade glibc-langpack-osUpgrade glibc-langpack-waeUpgrade glibc-langpack-woUpgrade glibc-langpack-stUpgrade glibc-langpack-yiUpgrade glibc-langpack-bgUpgrade glibc-langpack-ssUpgrade glibc-langpack-sgsUpgrade glibc-langpack-lvUpgrade glibc-langpack-foUpgrade glibc-langpack-mtUpgrade glibc-langpack-theUpgrade glibc-langpack-boUpgrade glibc-langpack-kmUpgrade glibc-langpack-caUpgrade glibc-langpack-ttUpgrade glibc-benchtestsUpgrade glibc-langpack-veUpgrade glibc-langpack-orUpgrade glibc-langpack-ceUpgrade glibc-langpack-ndsUpgrade glibc-langpack-bnUpgrade glibc-langpack-deUpgrade glibc-langpack-hneUpgrade glibc-langpack-faUpgrade glibc-langpack-urUpgrade glibc-langpack-omUpgrade glibc-langpack-gaUpgrade glibc-langpack-zuUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-fyUpgrade glibc-langpack-aaUpgrade glibc-langpack-anUpgrade glibc-langpack-huUpgrade glibc-langpack-ptUpgrade glibc-langpack-nsoUpgrade glibc-langpack-azUpgrade glibc-langpack-szlUpgrade glibc-langpack-tkUpgrade glibc-langpack-dvUpgrade glibc-langpack-tsUpgrade glibc-langpack-hyUpgrade glibc-langpack-viUpgrade glibc-langpack-mrUpgrade glibc-langpack-siUpgrade glibc-langpack-ugUpgrade glibc-langpack-brxUpgrade glibc-langpack-yueUpgrade glibc-langpack-eoUpgrade glibc-langpack-mlUpgrade glibc-langpack-quzUpgrade glibc-langpack-brUpgrade glibc-langpack-zhUpgrade glibc-langpack-magUpgrade glibc-debuginfoUpgrade glibc-langpack-waUpgrade glibc-langpack-svUpgrade glibc-langpack-lzhUpgrade glibc-commonUpgrade glibc-langpack-niuUpgrade glibc-langpack-hiUpgrade glibc-langpack-swUpgrade glibc-langpack-roUpgrade glibc-langpack-paUpgrade glibc-langpack-dzUpgrade glibc-langpack-nhnUpgrade glibc-langpack-maiUpgrade glibc-langpack-mkUpgrade glibc-nss-develUpgrade glibc-langpack-knUpgrade glibc-all-langpacksUpgrade glibc-langpack-skUpgrade glibc-langpack-koUpgrade glibc-langpack-iuUpgrade glibc-langpack-kwUpgrade glibc-langpack-nnUpgrade glibc-langpack-ltUpgrade glibc-langpack-filUpgrade glibc-langpack-shsUpgrade glibc-langpack-arUpgrade glibc-langpack-daUpgrade glibc-langpack-amUpgrade glibc-langpack-mnUpgrade libcrypt-nssUpgrade glibc-langpack-scUpgrade glibc-langpack-tgUpgrade glibc-langpack-trUpgrade glibc-langpack-heUpgrade glibc-langpack-tigUpgrade glibc-langpack-hrUpgrade glibc-langpack-etUpgrade glibc-langpack-taUpgrade glibc-langpack-esUpgrade glibc-langpack-psUpgrade glibc-utilsUpgrade glibc-langpack-tiUpgrade glibc-langpack-lnUpgrade glibc-langpack-ksUpgrade glibc-langpack-iaUpgrade glibc-langpack-gvUpgrade glibc-langpack-mgUpgrade glibc-langpack-gezUpgrade glibc-langpack-mniUpgrade glibc-langpack-enUpgrade nss_nisUpgrade glibc-langpack-xhUpgrade glibc-langpack-srUpgrade glibc-langpack-gdUpgrade glibc-langpack-tcyUpgrade glibc-langpack-lgUpgrade glibc-langpack-asUpgrade glibc-langpack-guUpgrade glibc-langpack-saUpgrade nscdUpgrade glibc-langpack-unmUpgrade glibc-langpack-msUpgrade glibc-langpack-sdUpgrade glibc-langpack-htUpgrade glibc-langpack-cmnUpgrade glibc-langpack-rwUpgrade glibc-langpack-fiUpgrade glibc-langpack-isUpgrade glibc-langpack-klUpgrade libcryptUpgrade glibc-langpack-igUpgrade glibc-langpack-cvUpgrade nss_dbUpgrade glibc-langpack-beUpgrade glibc-langpack-rajUpgrade glibc-langpack-doiUpgrade glibc-langpack-walUpgrade glibc-langpack-thUpgrade glibc-langpack-ocUpgrade glibc-langpack-kaUpgrade glibc-langpack-frUpgrade glibc-develUpgrade glibc-langpack-astUpgrade glibc-langpack-furUpgrade glibc-langpack-teUpgrade glibc-langpack-crhUpgrade glibc-locale-sourceUpgrade glibc-langpack-tlUpgrade glibc-langpack-sqUpgrade glibc-langpack-seUpgrade glibc-langpack-bsUpgrade glibc-langpack-plUpgrade glibc-staticUpgrade glibc-langpack-miUpgrade glibc-langpack-idUpgrade glibc-langpack-bemUpgrade glibc-langpack-af | Apr 27, 2020 | Feb 2, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Feb 2, 2018 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Feb 2, 2018 |
| Suse | — | Upgrade glibc-infoUpgrade glibc-profile-32bitUpgrade glibc-profileUpgrade glibcUpgrade nscdUpgrade glibc-locale-32bitUpgrade glibc-langUpgrade glibc-locale-x86Upgrade glibc-develUpgrade glibc-localeUpgrade glibc-locale-baseUpgrade glibc-locale-base-32bitUpgrade glibc-devel-32bitUpgrade glibc-32bitUpgrade glibc-extraUpgrade glibc-profile-x86Upgrade glibc-htmlUpgrade glibc-utilsUpgrade glibc-x86Upgrade glibc-i18ndataUpgrade glibc-devel-static | Feb 16, 2018 | Feb 2, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 2, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub