Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade glibc-utilsUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-commonUpgrade nscdUpgrade glibc | Dec 1, 2016 | Feb 8, 2013 |
| Debian | — | Upgrade glibcUpgrade eglibc | Jul 30, 2024 | Feb 8, 2013 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Feb 8, 2013 |
| Oracle_linux | — | Upgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-headersUpgrade glibc-staticUpgrade nscdUpgrade glibc | Oct 16, 2024 | Feb 8, 2013 |
| Suse | — | Upgrade glibc-profile-x86Upgrade glibc-testsuiteUpgrade glibc-extraUpgrade glibc-x86Upgrade glibc-devel-staticUpgrade glibc-devel-static-32bitUpgrade glibc-htmlUpgrade glibc-devel-32bitUpgrade glibc-locale-x86Upgrade glibc-localeUpgrade glibc-i18ndataUpgrade glibc-develUpgrade glibc-32bitUpgrade glibc-utils-32bitUpgrade glibc-profileUpgrade glibc-obsoleteUpgrade glibc-infoUpgrade glibc-locale-32bitUpgrade glibcUpgrade sle-sdk-releaseUpgrade glibc-utilsUpgrade nscdUpgrade glibc-profile-32bit | Dec 12, 2013 | Feb 8, 2013 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Feb 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub