glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Jul 1, 2017 | Jun 19, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 19, 2017 |
| Centos_linux | — | Upgrade glibc-headersUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-debuginfoUpgrade nscdUpgrade glibc-commonUpgrade glibc-static | Jun 21, 2017 | Jun 19, 2017 |
| Debian | — | Upgrade glibcUpgrade eglibc | Jun 20, 2017 | Jun 19, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-headersUpgrade glibcUpgrade nscdUpgrade glibc-utils | Nov 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-headersUpgrade glibcUpgrade nscd | Nov 30, 2017 | Jun 19, 2017 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Jun 19, 2017 |
| Oracle_linux | — | Upgrade glibc-headersUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-commonUpgrade nscdUpgrade glibc | Jun 21, 2017 | Jun 19, 2017 |
| Redhat_linux | — | Upgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade glibcUpgrade nscdUpgrade glibc-utilsUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibc-staticNo solution exists | Jul 1, 2017 | Jun 19, 2017 |
| Suse | — | Upgrade glibc-locale-32bitUpgrade glibc-profile-x86Upgrade nscdUpgrade glibc-devel-32bitUpgrade glibc-profile-32bitUpgrade sles12-docker-imageUpgrade glibc-langUpgrade sles12sp1-docker-imageUpgrade glibc-infoUpgrade glibcUpgrade glibc-utilsUpgrade sles12sp2-docker-imageUpgrade glibc-i18ndataUpgrade glibc-develUpgrade glibc-localeUpgrade glibc-locale-baseUpgrade glibc-extraUpgrade glibc-x86Upgrade glibc-locale-x86Upgrade glibc-locale-base-32bitUpgrade glibc-32bitUpgrade glibc-htmlUpgrade glibc-devel-staticUpgrade glibc-profile | Jun 20, 2017 | Jun 19, 2017 |
| Ubuntu | — | Upgrade libc6 | Jun 19, 2017 | Jun 19, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub