Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Sep 1, 2017 | Apr 19, 2016 |
| Centos_linux | — | Upgrade glibc-staticUpgrade nscdUpgrade glibc-debuginfoUpgrade glibc-utilsUpgrade glibc-headersUpgrade glibcUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-debuginfo-common | Aug 28, 2019 | Apr 19, 2016 |
| Debian | — | Upgrade eglibcUpgrade glibc | Feb 17, 2016 | Feb 16, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Apr 19, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-staticUpgrade glibcUpgrade glibc-headersUpgrade glibc-utilsUpgrade nscdUpgrade glibc-develUpgrade glibc-common | Nov 30, 2017 | Apr 19, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-staticUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-headersUpgrade nscdUpgrade glibc-commonUpgrade glibc | Nov 30, 2017 | Apr 19, 2016 |
| Oracle_linux | — | Upgrade glibcUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-develUpgrade nscdUpgrade glibc-static | Mar 28, 2017 | Apr 19, 2016 |
| Redhat_linux | — | Upgrade nscdUpgrade glibcUpgrade glibc-debuginfo-commonUpgrade glibc-debuginfoNo solution existsUpgrade glibc-headersUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-utils | Mar 21, 2017 | Apr 19, 2016 |
| Suse | — | Upgrade nscdUpgrade glibc-infoUpgrade sles12sp1-docker-imageUpgrade glibc-locale-base-32bitUpgrade glibc-profile-32bitUpgrade sles11sp4-docker-imageUpgrade glibc-locale-x86Upgrade glibc-x86Upgrade glibc-profileUpgrade sles12-docker-imageUpgrade glibc-32bitUpgrade glibc-profile-x86Upgrade glibc-extraUpgrade glibc-devel-32bitUpgrade glibc-htmlUpgrade glibc-langUpgrade glibc-i18ndataUpgrade glibc-devel-staticUpgrade glibc-develUpgrade glibcUpgrade glibc-utilsUpgrade glibc-locale-baseUpgrade glibc-locale-32bitUpgrade glibc-locale | Feb 16, 2016 | Feb 16, 2016 |
| Ubuntu | — | Upgrade libc6Upgrade libc6-dev | May 27, 2016 | Apr 19, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub