The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nptl-develUpgrade glibc-develUpgrade glibcUpgrade glibc-commonUpgrade nscdUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-profile | Dec 1, 2016 | Jun 1, 2010 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Jun 1, 2010 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 1, 2010 |
| Oracle_linux | — | Upgrade glibc-develUpgrade glibc-headersUpgrade glibcUpgrade glibc-utilsUpgrade glibc-commonUpgrade nscd | Oct 16, 2024 | Jun 1, 2010 |
| Suse | — | Upgrade glibc-develUpgrade glibc-dceext-32bitUpgrade glibc-htmlUpgrade glibc-i18ndataUpgrade glibc-x86Upgrade glibc-locale-64bitUpgrade glibc-locale-32bitUpgrade glibc-devel-32bitUpgrade glibc-localeUpgrade glibc-profile-x86Upgrade glibc-32bitUpgrade glibcUpgrade sap-aio-releaseUpgrade glibc-profile-64bitUpgrade glibc-profile-32bitUpgrade glibc-dceext-64bitUpgrade glibc-devel-64bitUpgrade glibc-dceext-x86Upgrade nscdUpgrade glibc-locale-x86Upgrade glibc-dceextUpgrade glibc-profileUpgrade glibc-infoUpgrade timezoneUpgrade glibc-obsoleteUpgrade glibc-64bit | Dec 12, 2013 | Jun 1, 2010 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Jun 1, 2010 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Jun 1, 2010 |
| Vmsa 2012 0018 | — | Upgrade VMware ESXi 5.1 to build number 911593Upgrade VMware ESXi 5.0 to build number 912577 | Jan 4, 2013 | Jun 1, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub