Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Sep 1, 2017 | Apr 19, 2016 |
| Centos_linux | — | Upgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-debuginfo-commonUpgrade glibc-devel | Aug 28, 2019 | Apr 19, 2016 |
| Debian | — | Upgrade eglibcUpgrade glibc | Feb 17, 2016 | Feb 16, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 7, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Apr 19, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-develUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibcUpgrade nscd | Nov 30, 2017 | Apr 19, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-develUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibcUpgrade glibc-commonUpgrade glibc-headersUpgrade nscd | Nov 30, 2017 | Apr 19, 2016 |
| Oracle_linux | — | Upgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-staticUpgrade nscdUpgrade glibc-headersUpgrade glibc-develUpgrade glibc | Mar 28, 2017 | Apr 10, 2015 |
| Redhat_linux | — | Upgrade glibc-headersUpgrade glibc-develNo solution existsUpgrade glibcUpgrade glibc-staticUpgrade nscdUpgrade glibc-commonUpgrade glibc-debuginfo-commonUpgrade glibc-debuginfoUpgrade glibc-utils | Mar 21, 2017 | Apr 19, 2016 |
| Suse | — | Upgrade nscdUpgrade glibcUpgrade glibc-x86Upgrade glibc-profile-32bitUpgrade glibc-infoUpgrade glibc-locale-base-32bitUpgrade sles12sp1-docker-imageUpgrade glibc-profileUpgrade sles11sp4-docker-imageUpgrade sles12-docker-imageUpgrade glibc-extraUpgrade glibc-profile-x86Upgrade glibc-32bitUpgrade glibc-locale-32bitUpgrade glibc-i18ndataUpgrade glibc-localeUpgrade glibc-locale-x86Upgrade glibc-langUpgrade glibc-devel-staticUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-devel-32bitUpgrade glibc-locale-baseUpgrade glibc-html | Feb 16, 2016 | Feb 16, 2016 |
| Ubuntu | — | Upgrade libc6Upgrade libc6-dev | May 27, 2016 | Apr 19, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub