glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Jul 1, 2017 | Jun 19, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 19, 2017 |
| Centos_linux | — | Upgrade glibcUpgrade glibc-headersUpgrade glibc-debuginfo-commonUpgrade glibc-staticUpgrade glibc-debuginfoUpgrade nscdUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-devel | Jun 21, 2017 | Jun 19, 2017 |
| Debian | — | Upgrade eglibcUpgrade glibc | Jun 20, 2017 | Jun 19, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-headersUpgrade nscdUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibcUpgrade glibc-commonUpgrade glibc-devel | Nov 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-headersUpgrade glibcUpgrade nscdUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-devel | Nov 30, 2017 | Jun 19, 2017 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Jun 19, 2017 |
| Oracle_linux | — | Upgrade nscdUpgrade glibcUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-common | Jun 21, 2017 | Jun 19, 2017 |
| Redhat_linux | — | Upgrade glibc-develUpgrade nscdUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-staticNo solution existsUpgrade glibc-debuginfo | Jul 1, 2017 | Jun 19, 2017 |
| Suse | — | Upgrade glibc-htmlUpgrade glibc-32bitUpgrade glibc-profileUpgrade glibc-locale-base-32bitUpgrade glibc-devel-staticUpgrade glibc-locale-baseUpgrade glibc-locale-x86Upgrade glibc-develUpgrade glibc-i18ndataUpgrade glibc-x86Upgrade glibc-localeUpgrade glibc-extraUpgrade sles12sp1-docker-imageUpgrade glibc-utilsUpgrade glibc-profile-32bitUpgrade glibc-langUpgrade sles12-docker-imageUpgrade glibc-locale-32bitUpgrade glibcUpgrade sles12sp2-docker-imageUpgrade nscdUpgrade glibc-infoUpgrade glibc-devel-32bitUpgrade glibc-profile-x86 | Jun 20, 2017 | Jun 19, 2017 |
| Ubuntu | — | Upgrade libc6 | Jun 19, 2017 | Jun 19, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub