Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nptl-develUpgrade glibcUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-profileUpgrade glibc-utilsUpgrade glibc-headersUpgrade nscd | Dec 1, 2016 | Jun 1, 2010 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Jun 1, 2010 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 1, 2010 |
| Oracle_linux | — | Upgrade glibcUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-commonUpgrade nscdUpgrade glibc-utils | Oct 16, 2024 | Jun 1, 2010 |
| Suse | — | Upgrade glibc-htmlUpgrade glibcUpgrade glibc-develUpgrade sap-aio-releaseUpgrade glibc-32bitUpgrade glibc-dceext-32bitUpgrade glibc-i18ndataUpgrade glibc-locale-32bitUpgrade glibc-x86Upgrade glibc-profile-64bitUpgrade glibc-localeUpgrade glibc-locale-64bitUpgrade glibc-profile-x86Upgrade glibc-devel-32bitUpgrade glibc-profile-32bitUpgrade nscdUpgrade glibc-dceext-64bitUpgrade glibc-dceextUpgrade glibc-dceext-x86Upgrade glibc-profileUpgrade glibc-64bitUpgrade glibc-locale-x86Upgrade glibc-devel-64bitUpgrade glibc-obsoleteUpgrade timezoneUpgrade glibc-info | Dec 12, 2013 | Jun 1, 2010 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Jun 1, 2010 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Jun 1, 2010 |
| Vmsa 2012 0018 | — | Upgrade VMware ESXi 5.1 to build number 911593Upgrade VMware ESXi 5.0 to build number 912577 | Jan 4, 2013 | Jun 1, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub