The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nscdUpgrade glibc-utilsUpgrade glibc-headersUpgrade glibc-profileUpgrade nptl-develUpgrade glibc-develUpgrade glibcUpgrade glibc-common | Dec 1, 2016 | Jun 1, 2010 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Jun 1, 2010 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 1, 2010 |
| Oracle_linux | — | Upgrade glibc-develUpgrade glibc-headersUpgrade glibcUpgrade glibc-commonUpgrade glibc-utilsUpgrade nscd | Oct 16, 2024 | Jun 1, 2010 |
| Suse | — | Upgrade glibc-32bitUpgrade sap-aio-releaseUpgrade glibc-develUpgrade glibcUpgrade glibc-x86Upgrade glibc-profile-64bitUpgrade glibc-profile-x86Upgrade glibc-devel-32bitUpgrade glibc-dceext-32bitUpgrade glibc-locale-64bitUpgrade glibc-localeUpgrade glibc-i18ndataUpgrade glibc-htmlUpgrade glibc-locale-32bitUpgrade glibc-locale-x86Upgrade nscdUpgrade glibc-obsoleteUpgrade timezoneUpgrade glibc-infoUpgrade glibc-dceextUpgrade glibc-profile-32bitUpgrade glibc-64bitUpgrade glibc-dceext-64bitUpgrade glibc-devel-64bitUpgrade glibc-profileUpgrade glibc-dceext-x86 | Dec 12, 2013 | Jun 1, 2010 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Jun 1, 2010 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Jun 1, 2010 |
| Vmsa 2012 0018 | — | Upgrade VMware ESXi 5.1 to build number 911593Upgrade VMware ESXi 5.0 to build number 912577 | Jan 4, 2013 | Jun 1, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub