Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Sep 1, 2017 | Apr 19, 2016 |
| Centos_linux | — | Upgrade glibc-debuginfo-commonUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-staticUpgrade glibc-debuginfoUpgrade nscdUpgrade glibc | Aug 28, 2019 | Apr 19, 2016 |
| Debian | — | Upgrade eglibcUpgrade glibc | Feb 17, 2016 | Feb 16, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 7, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Apr 19, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-headersUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibcUpgrade nscdUpgrade glibc-static | Nov 30, 2017 | Apr 19, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nscdUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-develUpgrade glibcUpgrade glibc-staticUpgrade glibc-utils | Nov 30, 2017 | Apr 19, 2016 |
| Oracle_linux | — | Upgrade nscdUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-develUpgrade glibc | Mar 28, 2017 | Apr 10, 2015 |
| Redhat_linux | — | Upgrade glibcUpgrade glibc-develNo solution existsUpgrade glibc-headersUpgrade glibc-staticUpgrade glibc-debuginfo-commonUpgrade glibc-utilsUpgrade glibc-commonUpgrade nscdUpgrade glibc-debuginfo | Mar 21, 2017 | Apr 19, 2016 |
| Suse | — | Upgrade glibc-localeUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-devel-staticUpgrade glibc-locale-x86Upgrade glibc-langUpgrade glibc-htmlUpgrade glibc-i18ndataUpgrade glibc-locale-baseUpgrade glibc-devel-32bitUpgrade glibc-32bitUpgrade glibc-profileUpgrade sles12-docker-imageUpgrade glibcUpgrade sles12sp1-docker-imageUpgrade glibc-locale-base-32bitUpgrade sles11sp4-docker-imageUpgrade glibc-profile-x86Upgrade glibc-extraUpgrade glibc-x86Upgrade glibc-locale-32bitUpgrade glibc-infoUpgrade nscdUpgrade glibc-profile-32bit | Feb 16, 2016 | Feb 16, 2016 |
| Ubuntu | — | Upgrade libc6-devUpgrade libc6 | May 27, 2016 | Apr 19, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub