Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glibcUpgrade eglibc | Mar 31, 2017 | May 29, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-utilsUpgrade glibcUpgrade glibc-headersUpgrade glibc-staticUpgrade nscdUpgrade glibc-commonUpgrade glibc-devel | Sep 12, 2019 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-headersUpgrade nscdUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade glibc-static | Jan 20, 2021 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-commonUpgrade glibc-develUpgrade glibc-utilsUpgrade nscdUpgrade glibc-headersUpgrade glibcUpgrade glibc-static | Nov 19, 2019 | Jun 1, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 7, 2016 |
| Suse | — | Upgrade glibc-locale-32bitUpgrade nscdUpgrade glibcUpgrade glibc-localeUpgrade glibc-utilsUpgrade sles12-docker-imageUpgrade glibc-i18ndataUpgrade glibc-infoUpgrade glibc-profileUpgrade glibc-langUpgrade glibc-locale-x86Upgrade sles12sp1-docker-imageUpgrade glibc-extraUpgrade glibc-32bitUpgrade glibc-devel-staticUpgrade glibc-profile-x86Upgrade glibc-profile-32bitUpgrade glibc-x86Upgrade glibc-htmlUpgrade glibc-locale-baseUpgrade glibc-develUpgrade glibc-devel-32bitUpgrade glibc-locale-base-32bit | Jun 8, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade libc6 | Mar 21, 2017 | Jun 1, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub