Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nscdUpgrade glibcUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-utils | Dec 1, 2016 | Feb 8, 2013 |
| Debian | — | Upgrade eglibcUpgrade glibc | Jul 30, 2024 | Feb 8, 2013 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Feb 8, 2013 |
| Oracle_linux | — | Upgrade nscdUpgrade glibcUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-headersUpgrade glibc-static | Oct 16, 2024 | Feb 8, 2013 |
| Suse | — | Upgrade glibc-htmlUpgrade glibc-utils-32bitUpgrade glibc-32bitUpgrade glibc-profile-x86Upgrade glibc-devel-32bitUpgrade glibc-testsuiteUpgrade glibc-devel-staticUpgrade glibc-develUpgrade glibc-extraUpgrade glibc-i18ndataUpgrade glibc-localeUpgrade glibc-locale-x86Upgrade glibc-x86Upgrade glibc-devel-static-32bitUpgrade sle-sdk-releaseUpgrade glibc-infoUpgrade glibc-profileUpgrade glibc-profile-32bitUpgrade glibc-obsoleteUpgrade glibc-utilsUpgrade glibcUpgrade nscdUpgrade glibc-locale-32bit | Dec 12, 2013 | Feb 8, 2013 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Feb 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub