Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Sep 1, 2017 | Apr 19, 2016 |
| Centos_linux | — | Upgrade glibc-debuginfo-commonUpgrade glibc-commonUpgrade glibc-develUpgrade nscdUpgrade glibcUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-debuginfo | Aug 28, 2019 | Apr 19, 2016 |
| Debian | — | Upgrade eglibcUpgrade glibc | Feb 17, 2016 | Feb 16, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Apr 19, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-headersUpgrade glibcUpgrade glibc-staticUpgrade glibc-utilsUpgrade nscdUpgrade glibc-develUpgrade glibc-common | Nov 30, 2017 | Apr 19, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-develUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibcUpgrade glibc-headersUpgrade nscd | Nov 30, 2017 | Apr 19, 2016 |
| Oracle_linux | — | Upgrade glibc-headersUpgrade glibc-commonUpgrade glibcUpgrade nscdUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-devel | Mar 28, 2017 | Apr 19, 2016 |
| Redhat_linux | — | Upgrade glibc-develNo solution existsUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-debuginfoUpgrade nscdUpgrade glibc-debuginfo-commonUpgrade glibc | Mar 21, 2017 | Apr 19, 2016 |
| Suse | — | Upgrade sles12sp1-docker-imageUpgrade glibc-profile-x86Upgrade glibc-infoUpgrade glibc-x86Upgrade sles11sp4-docker-imageUpgrade nscdUpgrade glibc-locale-base-32bitUpgrade glibc-32bitUpgrade glibc-extraUpgrade sles12-docker-imageUpgrade glibc-profileUpgrade glibc-locale-x86Upgrade glibc-profile-32bitUpgrade glibc-develUpgrade glibc-langUpgrade glibc-locale-32bitUpgrade glibc-utilsUpgrade glibc-locale-baseUpgrade glibc-devel-staticUpgrade glibcUpgrade glibc-devel-32bitUpgrade glibc-htmlUpgrade glibc-i18ndataUpgrade glibc-locale | Feb 16, 2016 | Feb 16, 2016 |
| Ubuntu | — | Upgrade libc6Upgrade libc6-dev | May 27, 2016 | Apr 19, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub