glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Jul 1, 2017 | Jun 19, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 19, 2017 |
| Centos_linux | — | Upgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-debuginfoUpgrade glibc-staticUpgrade nscdUpgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade glibc | Jun 21, 2017 | Jun 19, 2017 |
| Debian | — | Upgrade eglibcUpgrade glibc | Jun 20, 2017 | Jun 19, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-commonUpgrade glibc-develUpgrade nscdUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-headersUpgrade glibc | Nov 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-staticUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-headersUpgrade nscdUpgrade glibc | Nov 30, 2017 | Jun 19, 2017 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Jun 19, 2017 |
| Oracle_linux | — | Upgrade glibc-headersUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade nscd | Jun 21, 2017 | Jun 19, 2017 |
| Redhat_linux | — | Upgrade glibcUpgrade nscdUpgrade glibc-debuginfo-commonUpgrade glibc-develUpgrade glibc-headersNo solution existsUpgrade glibc-debuginfoUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-common | Jul 1, 2017 | Jun 19, 2017 |
| Suse | — | Upgrade glibc-utilsUpgrade sles12sp1-docker-imageUpgrade glibcUpgrade glibc-locale-32bitUpgrade glibc-devel-32bitUpgrade glibc-infoUpgrade nscdUpgrade sles12sp2-docker-imageUpgrade glibc-profile-32bitUpgrade glibc-profile-x86Upgrade glibc-langUpgrade sles12-docker-imageUpgrade glibc-x86Upgrade glibc-localeUpgrade glibc-htmlUpgrade glibc-develUpgrade glibc-32bitUpgrade glibc-extraUpgrade glibc-profileUpgrade glibc-locale-x86Upgrade glibc-devel-staticUpgrade glibc-i18ndataUpgrade glibc-locale-baseUpgrade glibc-locale-base-32bit | Jun 20, 2017 | Jun 19, 2017 |
| Ubuntu | — | Upgrade libc6 | Jun 19, 2017 | Jun 19, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub