The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glibcUpgrade eglibc | Jul 30, 2024 | Apr 8, 2015 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Apr 8, 2015 |
| Oracle_linux | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-staticUpgrade nscd | Oct 16, 2024 | Apr 8, 2015 |
| Suse | — | Upgrade glibc-profileUpgrade pam-modulesUpgrade nscdUpgrade glibc-i18ndataUpgrade glibc-infoUpgrade glibc-develUpgrade libxcryptUpgrade glibc-profile-32bitUpgrade glibc-32bitUpgrade glibc-locale-x86Upgrade glibc-htmlUpgrade pam-modules-32bitUpgrade glibc-locale-32bitUpgrade glibc-devel-32bitUpgrade glibc-devel-staticUpgrade glibc-langUpgrade glibc-extraUpgrade glibc-locale-baseUpgrade glibc-localeUpgrade libxcrypt-32bitUpgrade glibc-utilsUpgrade glibc-x86Upgrade glibcUpgrade pwdutilsUpgrade glibc-profile-x86Upgrade pwdutils-plugin-auditUpgrade glibc-locale-base-32bit | Dec 18, 2015 | Mar 5, 2015 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Apr 8, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub