Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5) aligned_alloc functions.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade eglibcUpgrade glibc | Jul 30, 2024 | Oct 9, 2013 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Oct 9, 2013 |
| Oracle_linux | — | Upgrade glibcUpgrade glibc-develUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-utilsUpgrade nscd | Oct 16, 2024 | Oct 9, 2013 |
| Suse | — | Upgrade glibc-locale-x86Upgrade glibc-devel-32bitUpgrade glibc-x86Upgrade glibc-extraUpgrade glibc-infoUpgrade glibc-32bitUpgrade glibc-profile-32bitUpgrade glibc-htmlUpgrade nscdUpgrade glibc-devel-static-32bitUpgrade glibc-utilsUpgrade glibc-utils-32bitUpgrade glibc-profileUpgrade glibc-obsoleteUpgrade glibc-testsuiteUpgrade glibc-localeUpgrade glibcUpgrade glibc-profile-x86Upgrade glibc-i18ndataUpgrade glibc-locale-32bitUpgrade glibc-devel-staticUpgrade sle-sdk-releaseUpgrade glibc-devel | Dec 12, 2013 | Oct 9, 2013 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Oct 9, 2013 |
| Vmsa 2014 0002 | — | Upgrade VMware ESXi 4.0 to build number 1682696Upgrade VMware ESX 4.0 to build number 1682696Upgrade VMware ESXi 5.1 to build number 1743201Upgrade VMware ESXi 5.5 to build number 1623387Upgrade VMware ESXi 4.1 to build number 1682698Upgrade VMware ESX 4.1 to build number 1682698Upgrade VMware ESXi 5.0 to build number 1749766 | Oct 28, 2015 | Oct 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub